CTF — Based

Advanced mapping of API vulnerabilities with OWASP Top 10 and CVSS. Details reconnaissance phases and defense evasion techniques.

An easy OSINT demo and safety guide

If you’re still on Windows 10 or thinking about what comes next, you’ve probably noticed the buzz.

As always we’ll start off with an nmap scan.. This is alot of information.. So bare with me..

TL;DR: In this lab, I analyzed a vulnerable WordPress-based web server running on Apache. I started with enumeration (port scan and…

Blockchain has long been seen as unbreakable — a fortress of trust securing trillions in crypto. But the rise of quantum computing could…

Continuing my home SOC lab journey, I hit an interesting challenge: my Wazuh server is cloud-hosted on Linode, but my Splunk Enterprise…

Extracting a Whitespace-Hidden Flag

This is a short walkthrough of Intro to Cyber Threat Intel from TryHackMe

Episode 10: Detection Engineering Life Cycle (Part 2)

We’ve reached the final challenge. Stuxbot has evolved, and it’s time to put everything we’ve learned to the test. This skills assessment…

“3.5 million jobs. $100K+ starting pay. Zero unemployment.” Sounds too good to be true? It’s not — if you know how to play the game.

A Practical Guide to Removing Hardcoded Secrets from n8n Workflows and WordPress Plugins

SK Telecom's Q3 profit fell 90% after a data breach affecting 27M customers and a $96.5M fine. The company launched a $349M program to restore customer trust.

Feds charged former DigitalMint employees with orchestrating ALPHV/BlackCat ransomware attacks, allegedly stealing $1.2M from a Florida medical manufacturer.

Former L3Harris exec pleaded guilty to stealing 8 classified zero-days valued at $35M and selling them to a foreign broker. The betrayal exposed critical security flaws.

Python approved PEP 810, introducing explicit lazy imports to speed up startup times and reduce memory consumption. The feature is slated for inclusion in Python 3.15.

FortiGuard warns financially motivated hackers now use legitimate accounts (AnyDesk, VPN) to bypass detection. Stolen credentials are cheap and offer unparalleled stealth.

This document summarizes key cyber threats identified between October 27 and November 2, 2025, including related threat events