بســــم اللّه الرحمـــن الرحيــــم

Symfony patched a High-severity flaw (CVE-2025-64500) in its Request component. Improper PATH_INFO parsing allows attackers to bypass access control rules in vulnerable applications.

Cisco patched a High-severity EoP flaw (CVE-2025-20341) in Catalyst Center Virtual Appliance. A low-privileged Observer user can remotely elevate privileges to Administrator via a crafted HTTP request.

Understanding the BOLA (Broken Object Level Authorization) vulnerability, its exploitation (horizontal/vertical escalation), and detection…

First, download the PDF file and review its contents. A file named confidential.pdf will be downloaded. Check for anything unusual or…

Here’s a secret your Internet Service Provider (ISP) probably hopes you don’t discover: they can see, and often log, every single website…

Learn how to defend against phishing emails.

Vladimir Tsakanyan An Analysis of Strategic Implications and the Evolution of State-Sponsored Cyber Operations

What We’ve Accomplished in This Splunk Series

Write-up : Easy Peasy — TryHackMe

What is machine learning?

Subtitle:
Why the UK’s cyber skills shortage is really a human capital challenge.

Understanding the BOLA (Broken Object Level Authorization) vulnerability, its exploitation (horizontal/vertical escalation), and detection…

Active Directory Hacking

When performing an internal pentest targeting Active Directory, chances are you will need to enumerate users. User enumeration can support…

Cloud environments — love them or hate them — are the new battleground.

Every message we send today travels through an invisible maze of networks that most of us never think twice about. But behind that everyday…

About this Gig

My Road to Recovery: Escaping the DmmBitcoin Trap and Reclaiming My Funds

Cybersecurity is no longer an optional consideration for Australian businesses — it’s a frontline business priority. With cyber incidents…