You know what’s scarier than realizing you left the oven on? Discovering that the software update you just installed came gift-wrapped with…

What if your AI assistant could be tricked into leaking customer records — without breaching a single line of backend code?

A company’s security team detected unusual network activity linked to a potential malware infection. As a forensic analyst, your mission…

The Challenge

It’s an old blog which I found in my draft written 2 years back.

Unsubscribing Employee and Sending Unauthorized Message

AppSec IR Fundamentals

September 2025 was a watershed moment for the entire software development community. In the span of a few weeks, the npm ecosystem was…

This trick is called a prompt injection, and it’s one of the biggest headaches for anyone building LLM-powered apps today.

For Educational Purposes Only. Only scan hosts/networks you own or have permission to test.

What is SSRF?

The Day My Coffee Maker Tried to Hack Me

Software builds itself now. In the time it takes you to read this sentence, thousands of CI/CD pipelines have compiled code, run automated…

Lab: JWT authentication bypass via unverified signature

Does the Internet Run on Satellites? Let’s bust the myths and explore the real story.✨✨

How a single delivery failure notification revealed a multi-stage phishing operation spanning across multiple cloud infrastructure…

TL;DR Walkthrough of the TryHackMe Services room.

Read Part 1 here.

Neuralink will begin a new clinical trial in the US to test a brain implant that translates thoughts into text, aiming to help patients with speech disorders.