Cybersecurity

Turning a silent vulnerability into a readable one: how redirecting command output into a public directory lets you read RCE results… Continue reading on Medium

Modern organizations rely on hundreds of connected devices to support daily operations. Managing and securing those devices has become one… Continue reading on

When the server stays silent: how to prove Remote Code Execution using nothing but a stopwatch and the Linux sleep command. Continue reading on Medium »

A board-level way to turn security findings into decisions about downtime, dollars, trust, and legal exposure. Continue reading on Medium »

How can businesses protect sensitive data, improve employee productivity, and reduce security risks without disrupting daily operations? Continue reading on Med

Organizations today operate in a highly connected digital environment where websites, cloud services, mobile applications, remote work… Continue reading on Medi

Fortifying the Foundation: Navigating the Wild World of Software Supply Chain Security...

The thing that makes router research feel slow is not always the crypto or the reversing. A lot of the time it is the fact that the device… Continue reading on

Bir mesajı şifrelemek, onu güvenli hâle getirmek için her zaman yeterli değildir. Continue reading on Medium »

Last year I was doing a code review for a startup. Everything looked fine on the surface, clean code,...

Minutes will not be published, and MPs still have no answer on the group's budget or how its members were chosen

When a CI pipeline failed at 02:13 AM on March 3, we discovered that 412 distinct API tokens had been...

Why doing both is not confusion — it’s your biggest competitive edge Continue reading on Medium »

Currently doing a three year computer science bachelors with a major in cybersecurity and I’ve been looking into HackTheBox and TryHackMe for some extra work du

reCAPTCHA v3 doesn't show a puzzle — it scores your whole session 0.0–1.0. Here's what actually drives a low score (IP, fingerprint, behavior) and how to raise

In today’s digital economy, data has become one of the most valuable assets for any organization. From customer records and financial… Continue reading on Mediu

What spies, FBI agents, and your nosy neighbor all have in common — and how you can join the club for $0. Continue reading on Medium »

Welcome back — this is Part IV and the final piece of the series. Continue reading on MeetCyber »

I thought my code was secure. An AI security review disagreed — and it was right. Continue reading on Medium »

Most apps think they are secure because they have login pages. But authentication is only the first...

Most people think penetration testing starts with running tools — Nmap, Metasploit, Burp Suite. But...

Stop Uploading Your Sensitive Data to Sketchy Websites Just to Trim a File If you have...

A monorepo can look like one repository, but security teams should treat it as many applications...

Someone on your leadership team asked a reasonable question: should we adopt passkeys? You searched...

Most people who study networking learn TCP from diagrams and textbooks. But there is a real...

The digital world is growing rapidly, and so are cyber threats. From multinational companies to government organizations and startups… Continue reading on Mediu

A few months ago, one of my friends was looking for a new pair of wireless earbuds. He found a website offering a huge discount — almost… Continue reading on Me

Set up a SOC lab with Elasticsearch, Kibana, and Fleet Server. Continue reading on Medium »

Most developers think password hashing is about authentication. It's not. Authentication is just a...

Due to increasing complexity in cyber-attacks as well as regulatory changes, there is a growing importance attached to visibility as well… Continue reading on M

Small businesses rarely fail because attackers outsmart their technology. They fail because their environments expand faster than their… Continue reading on Med

Static analysis used to mean a linter nobody read. In banking, it now decides who gets to touch the mainframe next.

Went down the quishing rabbit hole after a couple of incident reports in our sector flagged QR-based credential harvesting, and now I'm auditing our own QR usag

Think quantum-proofing your applications requires a Ph.D. in advanced lattice mathematics? Think again.

The Floppy Disk in the Mailbox Continue reading on Medium »

An expanded version of my keynote at ISC.AI 2026 in Beijing. The framework and the tool are open — take them, break them, and send me what… Continue reading on

Series: Web3 Security Zero se Advance ️ | Article #20 By HackerMD | 32 min read Continue reading on Medium »

A week ago, I finished the entire XSS Apprentice track on PortSwigger, nine labs of finding sinks and breaking out of contexts. Continue reading on Medium »

The first two clickjacking labs were about framing and positioning. This third one adds a defense on top, a frame buster script meant to… Continue reading on Me

Hey everyone, I’m stuck on a weird Fusion SOAR issue. I have three separate workflows set up for Identity , Endpoint , and NG-SIEM . When I use Test Execution w

Hi everyone, I recently got a free voucher for the Microsoft Certified: Security Operations Analyst Associate exam, but I have to take it on 28/06/2026 . The pr

Stop treating security training as a yearly chore. Learn how to use MCP to bridge the gap between vulnerabilities and developer education in real-time.

Shri Venkateshwara University and UP Police Amroha concluded the 12 days Cyber Security National Workshop 2026 with full fanfare and… Continue reading on Medium

Executive Summary This writeup documents the complete exploitation chain for the Nexus...

arXiv:2606.25200v1 Announce Type: cross Abstract: The accelerated digitalization of renewable energy smart grids through IoT sensors, AMI, and SCADA systems has

arXiv:2601.23147v2 Announce Type: replace-cross Abstract: The integrity of time in distributed Internet of Things (IoT) devices is crucial for reliable operatio

There's a move almost every trust system makes, and it's quietly broken. You have a thing you want...

A real story of a small business that lost thousands in days — and the complete playbook to recover and protect your site. Continue reading on Medium »