Cybersecurity

Static analysis used to mean a linter nobody read. In banking, it now decides who gets to touch the mainframe next.

Went down the quishing rabbit hole after a couple of incident reports in our sector flagged QR-based credential harvesting, and now I'm auditing our own QR usag

Think quantum-proofing your applications requires a Ph.D. in advanced lattice mathematics? Think again.

The Floppy Disk in the Mailbox Continue reading on Medium »

An expanded version of my keynote at ISC.AI 2026 in Beijing. The framework and the tool are open — take them, break them, and send me what… Continue reading on

Series: Web3 Security Zero se Advance ️ | Article #20 By HackerMD | 32 min read Continue reading on Medium »

A week ago, I finished the entire XSS Apprentice track on PortSwigger, nine labs of finding sinks and breaking out of contexts. Continue reading on Medium »

The first two clickjacking labs were about framing and positioning. This third one adds a defense on top, a frame buster script meant to… Continue reading on Me

Hey everyone, I’m stuck on a weird Fusion SOAR issue. I have three separate workflows set up for Identity , Endpoint , and NG-SIEM . When I use Test Execution w

Hi everyone, I recently got a free voucher for the Microsoft Certified: Security Operations Analyst Associate exam, but I have to take it on 28/06/2026 . The pr

Stop treating security training as a yearly chore. Learn how to use MCP to bridge the gap between vulnerabilities and developer education in real-time.

Shri Venkateshwara University and UP Police Amroha concluded the 12 days Cyber Security National Workshop 2026 with full fanfare and… Continue reading on Medium

Executive Summary This writeup documents the complete exploitation chain for the Nexus...

arXiv:2606.25200v1 Announce Type: cross Abstract: The accelerated digitalization of renewable energy smart grids through IoT sensors, AMI, and SCADA systems has

arXiv:2601.23147v2 Announce Type: replace-cross Abstract: The integrity of time in distributed Internet of Things (IoT) devices is crucial for reliable operatio

There's a move almost every trust system makes, and it's quietly broken. You have a thing you want...

A real story of a small business that lost thousands in days — and the complete playbook to recover and protect your site. Continue reading on Medium »

Di era digital yang semakin berkembang, pengguna memiliki banyak pilihan platform online untuk berbagai kebutuhan. Namun, tidak semua… Continue reading on Mediu

 Knowledge should be gated by curiosity, not paywalls. If you don’t have a Medium subscription, use the free link below and enjoy the… Continue reading on Medi

In June 2026, the FortiBleed campaign came to light after a dataset containing a large volume of login information associated with… Continue reading on OSINT Te

Transforming IP addresses into actionable context for auditing, analytics, and security Continue reading on Medium »

Look, most VPN comparisons are mind-numbingly boring—they just list features and call it a day. But when you're actually running a business, choosing the right

Want to know the dirty secret of VPN comparisons? Most of them are written by people who never actually paid for the product. I've tested more VPNs than I can c

Youtube link: https://youtu.be/sDU4JxlWrnY Continue reading on Medium »

An attacker force-pushed a malicious composite action into codfish/semantic-release-action and moved fifteen published tags to that commit, exposing GitHub Acti

Ex employee here and I’m hearing up to 30% of Snyk’s team was let go. All teams impacted. Leadership says it’s to pivot to AI security. This comes a day after t

Continue reading on Medium »

I shipped a Firestore rules change at 11 PM, ran my security-reviewer subagent against the diff, and it caught a request.auth.uid… Continue reading on Medium »

Here’s what I found inside and the open-source tool I built to find it. Continue reading on OSINT Team »

Here is a scenario that shows up on the SY0-701 exam in different costumes. A server is actively...

The Art of Turning Public Data into Actionable Intelligence Continue reading on OSINT Team »

The Day I Stopped Writing Manual Checks Continue reading on OSINT Team »

The Story That Changed How I Do Recon Continue reading on OSINT Team »

https://dirkjanm.io/bypassing-conditional-access-with-resource-exclusion/ submitted by /u/cydex_cx [link] <a href="https://www.reddit.com/r/cybersecurity/commen

Introduction Preparing for a cybersecurity interview often entails navigating a fragmented...

Writing your first exploit shell script and deploying it through a cron-watched directory and why this level represents the most… Continue reading on Medium »

Altı temel security header’ı, eksik olduklarında neye sebep oldukları ve düzeltmenin aslında ne kadar kolay olduğunu anlatmaya çalışacağım. Continue reading on

Geospatial Intelligence (GEOINT) Continue reading on OSINT Team »

I shouldn't feel this way. I'm all about tuning security controls to corporate risk appetite. But I feel defeated having roll back restrictions on personal mobi

got annoyed that pastebin and similar sites log everything and keep your text forever, so i built one...

"Explore how identity attacks, Living-off-the-Land techniques, AI-assisted operations, and modern SOC detection strategies are reshaping… Continue reading on Me

We sell bot detection. Last night I opened our database and found 555 pages of fake signups. This is...

Description : Don’t over-baked your pie! Continue reading on Medium »

Introduction Continue reading on MeetCyber »

Stop Paying Per-Request for a WAF: Self-Host Caddy + Coraza + OWASP CRS in 10 Minutes Continue reading on Medium »

During a recent penetration testing engagement for a client at CryptoNet Labs, I discovered a Stored Cross-Site Scripting (XSS)… Continue reading on Medium »

https://www.youtube.com/watch?v=SAwHtlm-NV4 Continue reading on Medium »

If you’ve ever been curious about cybersecurity but didn’t know where to start, this one’s for you. Continue reading on Medium »