Cybersecurity

Healthcare cybersecurity services are essential for protecting sensitive patient information, hospital systems, and digital health records… Continue reading on

Most people hear “cybersecurity” and picture a hoodie-wearing hacker typing furiously in a dark room. That image has done a lot of damage… Continue reading on M

In this blog, I walk you through the steps and thought process I follow while solving the skill assessment part 1 for the Active Directory… Continue reading on

Intro Continue reading on Medium »

Introducing LionSec Hub: Learn. Build. Protect. Continue reading on Medium »

Convincing text message has forced U.K. carrier O2 to warn its users to be on high alert. The text is designed to look like it comes from the carrier itself.

Imagine Sending a Secret Letter in a Crowded Market Continue reading on Medium »

Infostealers like Lumma don’t crack your login. They steal the ‘you’re already signed in’ wristband your browser holds — and with it, your… Continue reading on

Welcome to Cyber Briefing, your daily source for all things cybersecurity. We bring you the latest advisories, alerts, incidents, and news… Continue reading on

Stop screenshotting every double response in Burp Repeater. Here’s how to separate harmless protocol features from actual queue poisoning. Continue reading on M

The most dangerous cyber attacks do not always rely on sophisticated software exploits, often, they simply exploit human behavior (social… Continue reading on M

SBOMs, Syft, and Trivy — because your base image made dependency decisions you never signed off on. Continue reading on Medium »

The Philippines is under attack, and companies are desperately looking for people like you to stop it. Continue reading on Medium »

If you ask any bug hunter what their holy grail vulnerability is, the answer is almost always the same: Remote Code Execution (RCE). It is… Continue reading on

Sensitive data, PII, PHI, proprietary information, data states, and the judgment required to classify assets in a way that actually… Continue reading on Medium

The attack involved several types of drone and targeted the refinery's crucial AVT unit. The scale and sophistication are as significant as Russia's defensive f

A technical tour of hashing, salt, pepper, and why your SHA-256 password store is already broken Continue reading on Medium »

Turn vendor noise into ownership, exit plans, and board-ready decisions. Continue reading on Medium »

Continue reading on Medium »

GraphQL is a way for a website to get data from the server, where we can pick exactly what data we want in one request. In this lab, one… Continue reading on Me

Due to sophisticated cyber incidents being committed frequently, conventional preventative security controls cannot be relied upon to… Continue reading on MeetC

Continue reading on Medium »

Executive Summary Continue reading on Medium »

A VPN for Android was once considered a tool only for tech experts, but today that’s no longer true. Think about how much of your life… Continue reading on Medi

Most cloud systems make one authorization decision at login. Everything after runs on trust established at authentication time. For systems handling regulated d

SMBs experience more severe impacts of cyber incidents due to their limited resources. Continue reading on Medium »

After the document.write lab, I jumped straight into another DOM-based XSS challenge, this time using innerHTML as the sink. The… Continue reading on Medium »

After working through reflected and stored XSS, this lab introduced me to a different flavor of the same vulnerability class: DOM-based… Continue reading on Med

Sometimes you don’t break in… you just knock weird enough and the server spills everything. Continue reading on Medium »

Enumeration Continue reading on Medium »

When we talk about CSRF (Cross site request forgery), what comes in our mind? Obviously, a website where unauthorized commands are… Continue reading on Medium »

After years of debate, OT log overload remains a major challenge for critical infrastructure security teams, but AI is finally… Continue reading on Medium »

“The more you know about your target, the easier it becomes to identify its weaknesses.” Continue reading on Medium »

Here are some of the recommendations I share with my family and coworkers when asked how they can use AI in safe manners. Of course, these… Continue reading on

AI made the fakes flawless. So I quit vetting repos myself and put something on the door that actually reads them. Continue reading on Medium »

The hiring game changed. Here's the version of it that's actually being played right now. Continue reading on Medium »

In this report, we analyzed a multi-stage malware campaign that follows the infection chain: Email → Google Drive → PDF → Google Cloud… Continue reading on Medi

So our goal for this lab is to exploit a vulnerability in the application in a broadcast receiver that allows us to activate the master… Continue reading on Med

What Hackers Don’t Want Your Executive Team to Know Continue reading on Medium »

As cyber threats continue to evolve in sophistication, traditional security tools such as antivirus software, firewalls, and intrusion… Continue reading on Medi

Introduction Continue reading on Medium »

Today, I want to talk about a hidden struggle in cybersecurity: developing “reflexes and muscle memory.” Continue reading on Medium »

A nurse pastes a patient’s clinical notes into ChatGPT to get a summary before the next shift. A billing specialist drops a name, a… Continue reading on Medium

How four malware families store and retrieve command-and-control through EtherHiding — a per-scheme extraction method, a static reversal… Continue reading on Me

The Economics and Operational Reality Behind the MSSP Movement — 2025 Reality Check Continue reading on Medium »

I recently read an interesting take on the Model Context Protocol (MCP) being “dead.” While I agree with the author’s diagnosis of the… Continue reading on Medi

The Irish government is following the UK’s lead, using opinion polls to justify identity verification for everyone in the country… Continue reading on Medium »

A forgotten debug statement and a default password are all it takes. Continue reading on Medium »