Understanding the new frontier of browser-based attacks and how to defend against them.

The Skynet room on TryHackMe is an easy-level Linux machine. The goal is to capture both the user and root flags.

Walkthrough for Glitch CTF challenge on TryHackMe

Discover how to make the most of your ⏃⌰⟟⟒⋏ ⏁⟒☊⊑ $x staking rewards.

Critical vulnerabilities in Axis Communications' video surveillance products could allow unauthenticated remote code execution and network takeover. Update your systems now.

The SocGholish malware is now leveraging sophisticated traffic distribution systems like Parrot and Keitaro to filter and infect targets with ransomware.

An international law enforcement operation has dismantled the BlackSuit ransomware gang, responsible for over 450 attacks and more than $370 million in ransom.

A new vulnerability in hybrid Exchange servers (CVE-2025-53786) could allow an attacker with on-premise access to gain full control of your cloud environment.

When I hunted in a private program, I found an SVG file upload. But have the filter here, they don’t allow <xml> and <svg> tags in the…

Summary

The Divurion Group, a notorious cyber warfare entity composed of black hat hackers, is driving civil unrest across multiple nations through…

WhiteRabbit is an Insane-rated Linux machine on Hack The Box, and it definitely earns that label. It pushes you to think far beyond the…

Writeup of the “Retro” machine of tryhackme

Wristbands, crowd control, and backstage passes. A festival-inspired guide to modern cybersecurity

Hello, this is Penta Security.

안녕하세요. 펜타시큐리티입니다.

First of all I want to thank @TheSocialDork on Youtube for sharing this project and encouring new people to discover new tools and increase…

Does Zero carb mean No Breaches? Let’s find out.

In 2025, a leaked API key can cost you users, money, and trust in a matter of hours.

CISA warns of a critical authentication bypass flaw (CVE-2025-8284, CVSS 9.8) in Packet Power devices, allowing unauthenticated remote attackers to gain full access.