Cybersecurity

 This writeup is part of the Lainkusanagi OSCP Like List — a curated collection of machines recommended for OSCP preparation. Continue reading on Medium »

Shadow AI often hides inside browsers, extensions, meeting tools, copilots, and employee workflows. Without visibility, risky AI usage can… Continue reading on

The first Windows Secure Boot expiration date is here for more than a billion PCs, with more to come - and even some Linux distros are affected. Is your PC read

Organizations worldwide rely on GitLab to manage software development, collaboration, and DevSecOps workflows. Recently, GitLab released… Continue reading on Me

A Citizen Lab report puts forensic evidence and a Russian court document behind a familiar problem: surveillance tools do not come home when the seller asks. Ru

Hello everyone, and welcome back! Continue reading on Medium »

Ninety percent of beginners who start bug bounty hunting in 2026 will quit before they earn a single dollar. Not because they lack… Continue reading on Medium »

Ninety percent of beginners who start bug bounty hunting in 2026 will quit before they earn a single dollar. Not because they lack… Continue reading on Medium »

There’s a phrase circulating in shadowy corners of the internet that sounds almost reasonable if you don’t think too hard about it… Continue reading on Medium »

At first, I have discovered the IP address of the target Machine using netdiscover as shown below. Continue reading on Medium »

In a world powered by technology, every click, transaction, and login leaves a digital footprint. From online banking and social media to… Continue reading on M

Claims of "security" are everywhere, but very few chat APIs actually walk the walk. Most offerings...

SOC 2 Type II audits are painful. Auditors want evidence for 42 controls — who has access, are...

Turning a silent vulnerability into a readable one: how redirecting command output into a public directory lets you read RCE results… Continue reading on Medium

Modern organizations rely on hundreds of connected devices to support daily operations. Managing and securing those devices has become one… Continue reading on

When the server stays silent: how to prove Remote Code Execution using nothing but a stopwatch and the Linux sleep command. Continue reading on Medium »

A board-level way to turn security findings into decisions about downtime, dollars, trust, and legal exposure. Continue reading on Medium »

How can businesses protect sensitive data, improve employee productivity, and reduce security risks without disrupting daily operations? Continue reading on Med

Organizations today operate in a highly connected digital environment where websites, cloud services, mobile applications, remote work… Continue reading on Medi

Fortifying the Foundation: Navigating the Wild World of Software Supply Chain Security...

The thing that makes router research feel slow is not always the crypto or the reversing. A lot of the time it is the fact that the device… Continue reading on

Bir mesajı şifrelemek, onu güvenli hâle getirmek için her zaman yeterli değildir. Continue reading on Medium »

Last year I was doing a code review for a startup. Everything looked fine on the surface, clean code,...

Minutes will not be published, and MPs still have no answer on the group's budget or how its members were chosen

When a CI pipeline failed at 02:13 AM on March 3, we discovered that 412 distinct API tokens had been...

Why doing both is not confusion — it’s your biggest competitive edge Continue reading on Medium »

Currently doing a three year computer science bachelors with a major in cybersecurity and I’ve been looking into HackTheBox and TryHackMe for some extra work du

reCAPTCHA v3 doesn't show a puzzle — it scores your whole session 0.0–1.0. Here's what actually drives a low score (IP, fingerprint, behavior) and how to raise

In today’s digital economy, data has become one of the most valuable assets for any organization. From customer records and financial… Continue reading on Mediu

What spies, FBI agents, and your nosy neighbor all have in common — and how you can join the club for $0. Continue reading on Medium »

Welcome back — this is Part IV and the final piece of the series. Continue reading on MeetCyber »

I thought my code was secure. An AI security review disagreed — and it was right. Continue reading on Medium »

Most apps think they are secure because they have login pages. But authentication is only the first...

Most people think penetration testing starts with running tools — Nmap, Metasploit, Burp Suite. But...

Stop Uploading Your Sensitive Data to Sketchy Websites Just to Trim a File If you have...

A monorepo can look like one repository, but security teams should treat it as many applications...

Someone on your leadership team asked a reasonable question: should we adopt passkeys? You searched...

Most people who study networking learn TCP from diagrams and textbooks. But there is a real...

The digital world is growing rapidly, and so are cyber threats. From multinational companies to government organizations and startups… Continue reading on Mediu

A few months ago, one of my friends was looking for a new pair of wireless earbuds. He found a website offering a huge discount — almost… Continue reading on Me

Set up a SOC lab with Elasticsearch, Kibana, and Fleet Server. Continue reading on Medium »

Most developers think password hashing is about authentication. It's not. Authentication is just a...

Due to increasing complexity in cyber-attacks as well as regulatory changes, there is a growing importance attached to visibility as well… Continue reading on M

Small businesses rarely fail because attackers outsmart their technology. They fail because their environments expand faster than their… Continue reading on Med

Static analysis used to mean a linter nobody read. In banking, it now decides who gets to touch the mainframe next.

Went down the quishing rabbit hole after a couple of incident reports in our sector flagged QR-based credential harvesting, and now I'm auditing our own QR usag

Think quantum-proofing your applications requires a Ph.D. in advanced lattice mathematics? Think again.

The Floppy Disk in the Mailbox Continue reading on Medium »