Cybersecurity

There is something about the way rootkits work that I find genuinely fascinating. They do not break into a system; they hide inside it… Continue reading on Medi

Date: July 21, 2025 Continue reading on Medium »

Date: July 14, 2025 Continue reading on Medium »

Overview Continue reading on Medium »

Risk management is not just for enterprises with dedicated security teams and six-figure compliance budgets. I built this risk register as… Continue reading on

Do not sign-in on this page — it's an attack and your account will be hijacked.

Hello everyone! This is an easy rated room from the TryHackMe platform titled “LOOKBACK” Continue reading on System Weakness »

Vercel powers more than 4 million websites and processes 30 billion requests every week. Continue reading on Towards AI »

Algorithm confusion attacks nedir? Continue reading on Medium »

Web application forensics plays a critical role in modern cybersecurity by enabling organizations to detect, analyze, and respond to… Continue reading on Medium

A common belief in cybersecurity: Continue reading on Medium »

“It took just one phone call to destroy everything.” No hacking. No warning. Just one moment of trust. Continue reading on Medium »

Task 1 - Introduction: Continue reading on Medium »

Modern enterprises operate in a highly distributed digital ecosystem. Employees work remotely, applications run across hybrid and… Continue reading on Medium »

The September 2022 compromise of Uber’s internal infrastructure by the threat group Lapsus$ remains one of the most significant case… Continue reading on Medium

A simple Time-Line Observation: Continue reading on Medium »

I always wanted to build a practical cybersecurity project that could capture attacker behavior, log commands, and show everything in a… Continue reading on Med

Nasdaq’s "Autonomous Security" buzz is a landmark moment—but in the high-friction corridors of Jakarta, the human-in-the-loop is mandatory. Continue reading on

In a world where the majority of companies leverage Active Directory to handle authentication and access to resources in their environment… Continue reading on

TL;DR AI editors add auth middleware but skip ownership checks on resource endpoints Any authenticated user can read or modify another user's data (CWE-639) Fix

Uzun zamandır Siber güvenlik/Pentest dünyasının içinde olan biri olarak bu yazıda pentest yaparken yapılan bazı hatalardan bahsedeceğiz. Continue reading on Med

Most plugin-layer DM-hardening conversations treat "a hostile DM" as one problem. After shipping v0.21 of @thecolony/elizaos-plugin (origin-tagging DMs to refus

“What I cannot create, I do not understand.” — Feynman Continue reading on Medium »

And people who truly admire security don’t either. Continue reading on Medium »

Launch pressure hides security risk. Continue reading on Medium »

Difficulty:  Apprentice Continue reading on Medium »

Most security tools are very good at producing findings. That does not mean they are good at showing risk. Continue reading on Medium »

 What is OAuth? {#what-is-oauth} Continue reading on Medium »

Broken Access Controls are everywhere. In application security, they show up in many different ways. Sometimes they come from poorly… Continue reading on InfoSe

Data is your most valuable asset. Continue reading on Medium »

Compliance is now an architectural challenge. Bridge the Cap. 653 gap with AI-native ZTNA and automated audit trails. Continue reading on Medium »

cmpli (pronounced "comply") is an uncomplicated security guidance platform for small businesses. It walks owners through an assessment of how their business act

Continue reading on Medium »

The article discusses Mythos, an AI-powered capability that significantly accelerates vulnerability research and exploit development. While acknowledging its te

We didn’t just use JSON Web Tokens (JWT) for the login page; we injected them directly into our lowest-level business logic to eliminate… Continue reading on Me

Can a first-year BTech student with zero cybersecurity experience maintain a 10-day learning streak? Here’s what happened. Continue reading on Medium »

“In the Era of Machine Learning, we have to be Learning Machines” Continue reading on Medium »

Booking.com in the hands of hackers. 78 million records from GTA on a leak site. A Microsoft Defender that opens doors instead of guarding… Continue reading on

Do you really stop sending texts as Apple upgrades iPhone following FBI warning?

No noise. No alerts. Just pure discovery Continue reading on System Weakness »

No noise. No alerts. Just pure discovery Continue reading on System Weakness »

How a beginner can learn real-world AWS security concepts through Capture the Flag challenges — from leaked credentials to cross-account… Continue reading on Me

After a 263% surge in vulnerability submissions, NIST moved 29,000 CVEs to “Not Scheduled” — leaving patch prioritization in limbo for… Continue reading on Medi

In modern software systems — especially cloud-native and SaaS architectures — keys are the crown jewels. API keys, database credentials… Continue reading on ज्ञ

Read Full Writeup Because It’s Worth it. Continue reading on Medium »

Hi everyone, in this article, I’ll walk you guys through a small bypass I found that helped me bypass the security questions altogether… Continue reading on Inf

One public Postman workspace exposed the full chatbot infrastructure of a government service — endpoints, authentication flows, live… Continue reading on InfoSe

I spent months chasing the wrong targets. One change turned everything around. Continue reading on InfoSec Write-ups »