Cybersecurity

Before I released my own AI chatbot plugin, I ran it through a security review. It came back with 35...

I was testing an e-commerce application last year. Continue reading on OSINT Team »

Your Firewall Can’t Read Minds. But Your Security Stack Should Continue reading on OSINT Team »

The simple logic behind CORS Misconfiguration, how I test for it, and why it is one of the easiest bugs to find Continue reading on OSINT Team »

The code was never random, and the seed was on your screen Continue reading on Medium »

How the collapse of the patch window changes everything, and what security teams should do about it. Continue reading on Medium »

I have documented the Git Worm malware incident that halted our team for 2 days and infected 100+...

On 2026-06-18 the Model Context Protocol's Enterprise-Managed Authorization (EMA) extension went Stable — announced by MCP maintainer Paul Carleton on the MCP b

Cloudflare has announced a joint initiative with Mozilla Firefox, Google Chrome, and Microsoft Edge to develop a new internet protocol that verifies whether web

The move comes after the company left potentially sensitive data from the initiative exposed internally.

Now that my degree is officially done and I’m focusing heavily on my AI-ML classes, I’ve been looking back at the code I wrote over the… Continue reading on Med

Now that my degree is officially done and I’m focusing heavily on my AI-ML classes, I’ve been looking back at the code I wrote over the… Continue reading on Med

A few weeks ago, I was reading about quantum computing when I came across something that genuinely surprised me. Continue reading on Medium »

This lab is vulnerable to password reset poisoning. The application has a password reset feature that sends an email containing a reset… Continue reading on Med

Hey everyone!  In this challenge, Flag Vault, we’ll analyze the target binary, uncover its hidden logic, and retrieve the flag using… Continue reading on Mediu

Hey everyone!  In this challenge, Flag Vault, we’ll analyze the target binary, uncover its hidden logic, and retrieve the flag using… Continue reading on Mediu

Makers of Chrome, Edge, Firefox back bot-fraud defense called Private Access Control Tokens

As yet another extortion crew Icarus exploits Salesforce-linked integrations

Take a walk with me through the lush jungle landscape of Isla Nublar. Through deep emerald-green ferns that brush past your arms as you… Continue reading on Ber

Researchers disclosed usbliter8, a SecureROM exploit affecting older Apple devices that can bypass boot protections with physical access. The post New Apple Exp

A new backdoor called Dohdoor doesn’t connect directly to a suspicious server. Continue reading on Medium »

How to Protect Your Company and Applications in Today’s Digital AI-World Continue reading on Medium »

At Shinray Digital, we love seeing local businesses thrive. As an all-in-one partner supplying top-tier IT services, software, hardware… Continue reading on Med

The Invisible Language Inside Your Chip Card Continue reading on Medium »

Description : Step through the looking glass. A sequel to the Wonderland challenge room. Continue reading on Medium »

裂 One programming mistake infected thousands of computers and changed cybersecurity forever. Continue reading on Medium »

This project demonstrates a basic Digital Forensics and Incident Response (DFIR) workflow using Velociraptor, where a Windows 10 endpoint… Continue reading on M

A research group in Austria pointed a web page at your SSD and guessed what you were doing. The browser makers said that’s not a bug. Continue reading on Medium

Cybersecurity researchers have identified nearly 7,000 fraudulent Amazon-themed domains registered in the six months leading up to Prime Day 2026, which begins

TrophyLab bad for Vlad as battlefield losses spill the secrets they had

You drag a sensitive PDF — a contract, a passport scan, a payslip — onto some "100% free, secure,...

Stop hardcoding weak test passwords. Learn how to generate secure credentials for QA automation, Cypress, Playwright, Postman, CI/CD… Continue reading on Medium

Test credentials are the most under-thought attack surface in modern engineering. Every team has a...

A major cybersecurity breach involving a third-party vendor for the Texas Parks and Wildlife Department (TPWD) has exposed the personal… Continue reading on All

The Pyramid of Pain: How to Make Cyber Attacks Expensive for Adversaries Continue reading on Medium »

Cybersecurity professionals use structured frameworks to understand how attackers operate. Two of the most important models are the Cyber… Continue reading on M

When people picture a cybersecurity job, they imagine someone breaking in. The most common job in the field is the opposite of that. It is… Continue reading on

Most cybersecurity breaches don’t begin with sophisticated hackers — they begin with ordinary employees making everyday decisions. Whether… Continue reading on

Picture this: It’s Tuesday morning. You’re reviewing accounts payable for your Charlotte-based business, and an email pops up from your… Continue reading on Med

For many small business owners, cybersecurity still feels like something only large corporations need to worry about. If you’re not a bank… Continue reading on

Building a Secure Homelab with Proxmox VE, pfSense, and Cilium Published: May 25, 2026 |...

When you need to shuffle an array in JavaScript, the naive approach using Math.random() and...

 This writeup is part of the Lainkusanagi OSCP Like List — a curated collection of machines recommended for OSCP preparation. Continue reading on Medium »

IPRoyal is a well-known proxy provider, but it’s not the right fit for everyone. If you’ve run into session instability, inconsistent IP… Continue reading on Me

The EAA is one year into enforcement, and most component libraries still ship without a single...

KioskExpo7 Lab Writeup [CyberDefenders] | by Loay Salah Continue reading on InfoSec Write-ups »

Cybersecurity often sounds complicated. Firewalls. Encryption. Malware. But in reality, most security incidents happen because of simple… Continue reading on Me

During a security review of Flowise v3.1.1, I identified a path that allows authenticated users capable of creating chatflows to achieve… Continue reading on Me