We’re back, just over 24 hours later, to share our evolving understanding of CVE-2025-10035.

Thanks to everyone who reached out after Part 1, and especially to the individual who shared credible intel that informed this update.

In Part 1 we laid out an…

Quick but complete walk-through for the Boot2Root CTF hosted during Cyber Quest 2025.

Today I focused on Nmap — one of the core tools for network reconnaissance and service discovery.Nmap helps you understand live hosts…

📺 Míralo ahora: 👉 https://youtu.be/WXZEsDVzWUQ

TLDR: Foothold — Web terminal (trivial); Privesc — Config file enum + MySQL db enum + port fwd + Zabbix svc + lat mvt + sudo -l (rsync)

A Coffee Machine Took Down X Business: The Weirdest Cyberattack of 2025

The strategic risk of attackers using your own environment against you

This is a walkthrough of Hydra from TryHackMe

Ever feel like you are building security controls in the dark? Imagine having a clear guide that is both practical and globally recognised…

Most of us use package managers like apt or yum without a second thought.  But attackers know that if they can tamper with a package or…

FURTHER READING CAN BE DONE USING THE FOLLOWING

How I Learned to Trace a Number’s Digital Footprint Using PhoneInfoga

Explore how attackers break into Linux systems and how you can detect this in logs

Learn how credentials are stored, cached, and exposed in Windows and Active Directory environments

Below this article, there are answers for those who are stuck on the questions rather than explanations.

Turn social media into your #1 revenue channel while you sleep.

Introduction