#cybersecurity

Creating to Exploiting: How a Simple PDF Became a Trojan

One Click. Total Compromise. Here’s What Happened.

1337_GTWK Linux Malware Analysis

This is the second part of a two-part series about a new Linux malware sample that I analysed (Click here for Part 1). In Part 1, we…

The Linux Command That Can Quietly Hand Attackers Root Access

🐧 The Linux command that can quietly hand attackers root access

🧠 BloodHound From Beginner to Pro — The Ghostyjoe™ Series

Learn How to Map, Analyze, and Exploit Active Directory Like a Pro

⚙️ Ghostyjoe™ Blackbelt Framework v2 — Full Recon, Scanning, Fuzzing & Cracking Automation

Build a Complete Ethical Hacking Pipeline with Nuclei, FFUF, Naabu, Gowitness & Hashcat

Belajar Linux dari Nol (Part 1): Cara ‘Jalan-Jalan’ di Terminal Tanpa GUI

Kebanyakan orang takut untuk pindah OS ke linux karena banyak stigma mengatakan bahwa linux itu susah, apa-apa harus pakai terminal, harus…

Task 3.2 -> Password Attacks (bruteit)

Giriş

Zero Trust Security: A CIO Implementation Guide

Zero Trust shifts the mindset from “trust but verify” to “never trust, always verify,” ensuring that every user, device, and application is…

You Don’t Need to Know How to Hack Anymore

You’ve heard of SaaS, PaaS, and IaaS, the pillars of cloud computing. Adding to that list in this age of AI is FaaS: Fraud as a Service.

The Report Nobody Hunted | Fiive Eyes

A threat intelligence team producing accurate reports and a hunting team defending the network are not the same as a security program that…

The Browser Extension Problem

Cybersecurity’s Blind Spot in the Age of AI

Your MFA Platform Trusts Someone. The Real Question Is Whether That Trust Was Warranted.

Trusted credentials and verified identities are not the same thing. IAL3 identity verification is the standard that separates them, and…

# From a Phishing Alert to DNS Exfiltration: TryHackMe SOC Simulator — Phishing Unfolding

> **Spoiler warning:** This write-up contains the full investigation, the reconstructed attack chain, and the final flag. All activity…

root_me-tryhackme-d4nc00p3r

Hello and welcome to our new challenge, today we have new room of tryhackme. In this room we have a website where we need to gain shell and…

Why network documentation can’t be your source of truth

Network documentation can tell you what was intended. It can’t prove what the network is doing right now. First published June 30, 2026, on…

SOC Analyst Career Guide

What is a SOC Analyst?

SOC Investigation: Unauthorized Country VPN Connection

A case study of a VPN alert triggered by the rule “VPN Connection Detected from Unauthorized Country”.

Surviving 2+ Years of 24/7 SOC Shifts — Here’s What I Actually Learned

A genuinely honest breakdown from someone who came in panicking over 500 alerts — and left with a few things worth sharing.

I Thought Building a SOC Lab Would Be Easy. I Was Wrong.

The unexpected lessons I learned while building my very first Security Operations Center lab.

SOC336 — Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025–21298) — EventID: 314

CVE-2025–21298: A Critical Windows OLE Zero-Click Vulnerability | OffSec

Shodan.io Integration with Wazuh SIEM Monitor Your Critical Assets and IoT Devices

Monitor your exposed critical assets on internet, including IoT devices

CyberTalents CypherAnxiety -Write-up

Challenge Name: Cypher Anxiety

Day 1/10: The Attacker’s Recon Phase — Cyber Kill Chain

Every cyberattack starts long before any exploit is executed. Today marks Day 1 of documenting my walkthrough of the Cyber Kill Chain on…

Benign True Positive – Investigation SOC d'un brute‑force MFA sur VPN

Python Web Penetration Testing — Day 7: Intercepting HTTP Requests — Building Your Own Proxy

I spent years trusting what browsers showed me.

Reimagining Identity Security for a More Efficient Government

Identity, Credential and Access Management (ICAM) has come to the forefront as government agencies consider eliminating inefficiencies and…

Deepfake Detection Strategies for Identity Proofing Systems

How can organizations detect deepfakes during identity proofing? The short answer: layered detection, liveness checks, forensic AI…

Countering Propaganda: How Ukraine Won the Information War in the Digital Age

This war can be won not only on the battlefield, but also within the Telegram feed. Ukraine has demonstrated that truth, when dynamic…

The Surface You Don’t Know | Fiive Eyes

Core Intelligence Platform Threat Surface

Software and Hardware Backdoors and Kill Switches

It’s Not a Bug, It’s a Feature — Why 27 Years Is Too Convenient to Call an Accident for Linux and OpenBSD

The First Sign of an Oracle Database Attack Is Often a Failed Login

Imagine you work at one of the world’s largest banks. Every day, people walk up to the vault to gain access. Most know the combination, but…

DeFi Security Best Practices: Prevent Smart Contract Vulnerabilities

Learn the top DeFi security best practices to prevent smart contract vulnerabilities and build secure decentralized finance applications.

Releasing Faction 2.0 at BlackHat Arsenal 2026🎉

I’m excited to announce that I’ll be returning to Black Hat Arsenal 2026 in Las Vegas and SecTor 2026 in Canada to demo OWASP Faction 2.0 —…

How AI Is Changing Enterprise Cybersecurity

Artificial Intelligence (AI) is rapidly transforming the way organizations operate.

Physical Security

HID Attacks: Why Your Computer Trusts a Keyboard More Than It Trusts You

OWASP API #2 — Broken Authentication: When APIs Forget to Verify Who You Are

Imagine you arrive at an airport. Instead of checking your passport, the security officer simply asks:

Multiple Ways to Achieve Windows Persistence

This blog discusses several Windows persistence techniques that can be used after gaining initial access, before your C2 callback dies on…

Rockwell Automation Addresses Critical Code Execution Vulnerabilities in Arena Simulation Software

Cybersecurity continues to play a vital role in protecting industrial software as organizations increasingly rely on digital tools to…

Building OmniScan: one console for offensive recon and scanning

*A look at the tool, how it fits together, and an honest ask for your ideas before it goes open source.*

How I Went From Interview Rejections to Building a 200+ Question Open‑Source Cybersecurity Resource

And why I’m giving it away for free.

From JWT Manipulation to Splunk Analysis Investigating a Multi Stage Web Application Compromise

“Attackers exploit vulnerabilities. Investigators connect evidence. Great security professionals understand both.”

Pillar 1 Part 2 Case Study: Anatomy of a Data Exfiltration Attack Path: Optus, Medibank, and the…

A walkthrough of two real, publicly documented breaches,

The Gentlemen: Inside One of 2026’s Fastest-Scaling Ransomware Operations

A threat intelligence profile of “The Gentlemen” ransomware-as-a-service group

How I Solved the BTLO “Bruteforce” Challenge: A Hands-On Windows Event Log Investigation

My step-by-step investigation of a brute-force attack using Windows Event Viewer and Blue Team Labs Online (BTLO).

🛡️ Cyber Insights with Folashade Is Public Wi-Fi Safe?

What Happens When Someone Borrows Your Phone?

Have you ever handed your phone to someone so they could make a quick call, only to remember that your personal conversations were still…

Investigating Credential Dumping Activity Using Mimikatz

Introduction

LetsDefend Challenge: Memory Analysis (Walkthrough)

The Fake Notepad++ Plugin That Was Actually a Three-Stage Espionage Chain

CERT-UA links a Russia-aligned group to a campaign that hides inside a real copy of a trusted code editor — decoy PDF included

ASM: A Self-Hosted Attack Surface Management Platform and a Postmortem on the Bug That Took Four…

This post has two parts. The first explains what ASM is and why it exists, for anyone evaluating recon tooling or learning how an ASM…