Cybersecurity

Enrolling and Managing Endpoints with Microsoft Intune Continue reading on Medium »

So I have a very common name and I'm old. That means I have a [ first.last@gmail.com ](mailto: first.last@gmail.com ) address. I remember when AltaVista was the

Installing software has become so normal that most people do it without thinking much. We search for a tool, open a download page, click… Continue reading on Me

I completed a Gophish lab with an instance in the cloud and I wanted to try it now with my gmail account. Continue reading on Medium »

My experience with Coding Temple’s Money Back Guarantee Continue reading on Medium »

How attackers keep their foothold after the initial compromise, and what defenders should watch for. Continue reading on Medium »

Hey everyone!  Today we will learn about SQL injection and fuzzing. For the whole session, we will use the metasploitable machine. We… Continue reading on Medi

In one of the largest supply chain data leaks in recent memory, Indian electronics manufacturer Tata Electronics suffered a massive breach… Continue reading on

Hey everyone! TryHackMe just announced the new Cyber Security 101 learning path, and there are tons of giveaways this time! This article… Continue reading on Me

Building realistic packet captures with a flag hidden inside — so your players have something worth fishing for. Continue reading on Medium »

Building realistic packet captures with a flag hidden inside — so your players have something worth fishing for. Continue reading on Medium »

The server told you too much, and that was enough to win. Continue reading on Medium »

As a Computer Science and Engineering (CSE) student, my journey into the world of technology has been centered around two core interests… Continue reading on Me

As a Computer Science and Engineering (CSE) student, my journey into the world of technology has been centered around two core interests… Continue reading on Me

Cross-Site Scripting (XSS) comes in many shapes and sizes, but Stored DOM XSS is particularly interesting. It occurs when an application… Continue reading on Me

DOM-based Cross-Site Scripting (DOM XSS) vulnerabilities occur when an application contains client-side JavaScript that processes data… Continue reading on Medi

In the previous posts of this series, we introduced the Stardust shellcode generator template and built a practical reverse shell payload… Continue reading on M

Sean Hollister, writing for The Verge (gift link): If you’ve visited a cannabis club in Spain, [Sammy] Azdoufal says, chances are your photo ID was among them —

Behind every seamless digital payment is a silent, high-stakes game of cat and mouse. Continue reading on Medium »

Find out how security teams use CVSS scores and VAPT severity levels to prioritise vulnerabilities before attackers exploit them. Continue reading on Medium »

Learning cybersecurity is definitely not a cakewalk. And no matter how many books you read, courses you do, or videos you watch, you can… Continue reading on Me

Interested in space cybersecurity as a career satellite security, ground station hardening, space protocol vulnerabilities (like those shown in the Viasat hack)

How to turn incident evidence into a defensible APT hypothesis using TTP mapping, IOCs, and probability ranking — without pretending… Continue reading on Medium

Hi! I’m Adam. I’m currently in the process of changing career from a Musician in the Royal Air Force into Cybersecurity, focusing on Blue… Continue reading on M

Hi everyone, I’m 22 and recently started my first full-time job as a cyber incident responder after graduating. The confusing part is that I don’t actually disl

When you first start working with data or building web applications, you spend all your time thinking about how to create cool things. You… Continue reading on

A free desktop app meant to stop you hand-editing config files now runs a local proxy that can reroute the API traffic of the agents you… Continue reading on Me

I recently built my first Microsoft Sentinel SOC lab in Azure to gain practical experience with SIEM deployment, log onboarding, and… Continue reading on Medium

This lab was created by HIVE CONSULT to simulate security weaknesses commonly found in Supply Chain Management platforms. The environment… Continue reading on M

Digital security is often discussed through tools: firewalls, monitoring systems, access controls and software updates. They all have a… Continue reading on Med

A field guide to how bug bounty hunters and penetration testers map an attack surface — from finding an organization’s ASN all the way to… Continue reading on S

The world of Governance, Risk, and Compliance (GRC) is changing faster than ever. Continue reading on Medium »

Most pentesters jump straight into BloodHound and Impacket. Here’s the foundation they’re missing , explained with a school analogy that… Continue reading on In

“Risk isn’t about predicting the future. It’s about preparing for the possibilities.” Continue reading on Medium »

A practical guide to using Windows Server Group Policy to centrally configure and deploy scheduled Microsoft Defender Antivirus scans… Continue reading on Mediu

The demand for Linux administrators, cloud engineers, DevOps professionals, and container platform specialists continues to rise across… Continue reading on Med

How we bypassed Windows Defender, utilized native Win32 APIs, and built a Zero-Trust endpoint monitoring system in Python. Continue reading on Medium »

The answer led me from a Windows security feature to a real-world MITRE ATT&CK persistence technique “T1547.004” Continue reading on Medium »

Cross-Origin Resource Sharing (CORS) is a browser security mechanism designed to break down the strict walls of the Same-Origin Policy… Continue reading on Medi

To me cybersecurity seems to be one of the very few CS domains which really allow you to do some truly meaningful work and positively contribute to society. Is

Stuxnet would be responsible for letting the cyber-weapon cat out of the bag. Continue reading on HackTrace »

What Is the Difference Between tcache_house_of_spirit and tcache_metadata_hijacking? Both techniques are heap exploitation primitives, but… Continue reading on

The hidden cost of “user-friendly” tech, and what happens when you finally claim root access to your digital life. Continue reading on Medium »

Finding bugs is becoming cheap. The scarce work in open source security is proving that fixes survive review and reach production. Continue reading on AISecHub

Process creation is one of the most important and critical events to monitor on any operating system. Continue reading on Medium »

Python helps you automate tasks. C helps you understand the machine. Discover why C remains one of the most valuable languages for… Continue reading on Medium »

More holes, more patches. https://www.theregister.com/security/2026/06/27/its-looking-like-a-hot-messy-summer-for-security-teams-as-ai-finds-countless-previousl

Free account → full data breach → 1,630 private documents → CEO account takeover. All before my coffee got cold. Continue reading on Medium »