Legal and Ethical Disclaimer:

Hi everyone 👋,  In this article, I’ll walk you through a real experience I had while hunting for bugs on a public bug bounty program. The…

Writeup of the “Brainstorm” machine of tryhackme

In today’s digital world, nearly everything is connected to the internet — from phones and TVs to banks, hospitals, and even refrigerators. With this convenience comes a risk: the possibility of…

Artificial Intelligence systems have begun to be used across all sectors and fields today. Autonomous systems powered by decision-support…

Your essential roadmap to protecting Kubernetes environments from modern threats in 2025.

SOC Lab Topology

The evolving landscape of vulnerability intelligence demands more than CVE monitoring — discover how to build a resilient, multi-source…

How business teams are building their own “governance” — and what auditors must do about it.

The Atomic macOS Stealer (AMOS) has undergone a significant and concerning evolution, now incorporating a persistent backdoor into its capabilities. Previously known primarily for its role as a data…

The word security has become a global buzzword in today’s world. Every company wants to secure their products, services, and other assets…

Writeup for Jurassic Park CTF.

Binary number system and logical addressing

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

GPOHound analyzes GPOs in Active Directory for misconfigurations and privilege escalation paths, integrating with BloodHound for enhanced security insights.

Huntress witnessed active exploitation of a critical RCE flaw (CVE-2025-47812) in Wing FTP Server, allowing root/SYSTEM access via null byte injection and Lua code execution.

Juniper warns of a critical flaw (CVE-2025-52950, CVSS 9.6) in Security Director 24.4.1, allowing unauthenticated attackers to read or tamper with sensitive resources. Update immediately.

Synacktiv reveals Laravel’s APP_KEY vulnerability allows RCE via deserialization attacks when the key is leaked or guessable, risking full application compromise.

SentinelOne uncovers a new macOS.ZuRu variant using a trojanized Termius app. It gains persistence via LaunchDaemon and deploys a Khepri C2 beacon for remote control.

SafePay, a new centralized ransomware group linked to LockBit 3.0, has hit 200+ MSPs/SMBs via RDP. It bypasses Defender, encrypts files, and exfiltrates data using WinRAR and FileZilla.