Cybersecurity

Heeeere we goooo: SQL injection or SQLi, is a vulnerability that occurs when an application includes user-controlled input inside an SQL… Continue reading on Me

The cavalry isn't delayed. It was never dispatched. You have already done the ritual. You clicked...

A walkthrough of the DOOM box. Three “small” bugs that mean almost nothing on their own, but when composed together give you a one-click… Continue reading on Me

Hello All! This is my first time posting but I just have a quick question if you all would be willing to give your input. I have 2.5 years of helpdesk experienc

The internet trusted passwords for decades. Now it’s trying to erase them. Continue reading on Medium »

You are not the customer. You are the training data. And now you are also the evidence. Continue reading on Medium »

You are not the customer. You are the training data. And now you are also the evidence. Continue reading on CodeToDeploy »

Aikido Security acquired Root, a company whose technology fixes known vulnerabilities directly inside the package version you already run. The trade-off: someon

Aprende técnicas avanzadas de inyección de comandos OS, evasión de WAF, escalación de impacto y cómo redactar informes de PoC. Continue reading on Medium »

Research June 27, 2026 · 6 min read Continue reading on Medium »

Four of the password attacks on SY0-701 read almost identically on the exam. The attacker wants...

Not all reCAPTCHA is the same. Here's how to identify v2 checkbox, v2 invisible, v3 score, and Enterprise from the page itself — what each means for automation,

5G SA was supposed to be more secure than every generation before it. In several important ways, it...

Behavioral monitoring can inform authorization. It cannot replace the authorization boundary. Continue reading on Medium »

Behavioral monitoring can inform authorization. It cannot replace the authorization boundary. Continue reading on Medium »

Two weeks of open-source security tooling: download numbers, what worked, what did not, and technical lessons.

Authorization: bearer undefined No error. No stack trace. Just a 401 that looked like it...

why do hackers and cybersecurity prbeessionaly profesionals hide their identity ? Continue reading on Medium »

5G SA was supposed to be more secure than every generation before it. In several important ways, it is. But the same architectural changes… Continue reading on

Got important chats older than 30 days? You'd better be sure the transcripts still exist

Red Team Journey | Chapter 2: Linux Fundamentals — Essential Commands Every Beginner Should Know Continue reading on Medium »

Old database habits, a new source of bugs, and why “it uses a prepared statement” doesn’t always mean what you think Continue reading on Medium »

The cruelest scam of 2026 doesn’t hunt for new victims. It hunts for the ones who already lost everything, and a fake lawyer is the bait. Continue reading on OS

The Process Environment Block (PEB) is a critical runtime structure in Windows that contains essential process metadata: image base, heap… Continue reading on M

Modern attackers don't always steal passwords—they steal trusted sessions. Learn why authentication...

Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here. All

A Story About Identity, Trust, and Choosing the Right Active Directory Migration Platform Continue reading on Medium »

I never thought I would become the kind of person who fell for an investment scam I always believed I was careful, skeptical, and smart… Continue reading on Med

A cheap Claude proxy is not just a bargain API. It may be an account farm, a model swap, and a very efficient way to leak your prompts… Continue reading on Medi

There’s a particular kind of dread that comes from realizing a vulnerability isn’t in some app you installed last week — it’s in a library… Continue reading on

Aflac Japan reported a data breach affecting 4.38 million policyholders after unauthorized actors accessed the 'Aflac Yoriso Net' portal for ten days. The breac

Metasploit is not just a tool for “running exploits.” That explanation is too small. Metasploit is a modular penetration testing framework… Continue reading on

(CYBER SecurIty AnalyST) Continue reading on Medium »

In this lab from PortSwigger’s Web Security Academy, the goal was simple: find the hidden private blog post and extract its secret… Continue reading on Medium »

Cybersecurity student starting my serious grind this july. looking for active Discord servers focused on web security, pentesting, or general infosec. beginner

How a Legitimate PowerShell Testing Tool Became a Stealthy Living-off-the-Land Binary Continue reading on Medium »

29% of security pros were open to fully autonomous pentesting last year; now only 9% are

The shift isn't AI writing phishing emails. It's AI making decisions. I've been thinking about a...

Security Team: “I have a major Grype...with what I Syfted out of your provided image." Developer:...

A large number of WhatsApp users in different regions were targeted by a dedicated threat actor with an outsmarting phishing attack that… Continue reading on Me

Might sound like a dumb question but I asked a question on reddit and someone sent me a link to a vet's LinkedIn and when I tried opening it it wouldn't load i

Why packets need frames, why bandwidth isn’t Internet speed, and how networks decide who gets to transmit first. Continue reading on Medium »

“Efficiency is doing things right; effectiveness is doing the right things.” — Peter Drucker Continue reading on Medium »

AdminSDHolder is a protected Active Directory object located at CN=AdminSDHolder,CN=System, . Its security descriptor serves as the… Continue reading on Medium

Hi, I'm currently a SIEM detection engineer working with Google SecOps SIEM. I'm looking for certifications to round out my knowledge, particularly around how t

Whether you're an aspiring ethical hacker, SOC analyst, penetration tester, DFIR investigator, or...

And how I built an open-source platform to solve it. The Problem No One Is Talking...

The Microsoft UEFI CA 2011 quietly expired on June 27, 2026. If you're running anything with Secure...