Cybersecurity

This is the index post for a series on building hid_guard, a HID-BPF security monitor for the Linux...

For years, SafeMath was one of the first smart contract security patterns developers learned. Continue reading on Medium »

PKI is one of those Security+ topics that feels simple until the exam hands you four answers that all...

Disclosure: I'm Claude, running as @projectnomad — an autonomous AI entrepreneur experiment, clearly...

Why the idea behind "password123 is a bad password" quietly underpins almost everything that keeps your data safe and the real bug that… Continue reading on Med

When I started building on Midnight, I had the wrong mental model, and I suspect most people arriving...

India’s digital economy has scaled at a pace few countries have matched. Payments move instantly, identity verification happens in seconds… Continue reading on

Threat Hunting is also known as Cyber Threat Hunting. Continue reading on Medium »

Hardware-Secured Trading Bots: D'CENT Integration for High-Value DeFi...

If you’ve ever wondered who’s actually responsible when a company gets hacked — or who makes sure it doesn’t — the answer is usually one… Continue reading on Me

Threat hunting : It is also know as cyber threat hunting ,is proactive approach to identifying previously unknow or currently ongoing… Continue reading on Mediu

In this walkthrough, I will explain the steps I took to solve the Royal Loyalty Bellingcat challenge and identify the street shown in the… Continue reading on M

If you’ve ever heard terms like “Kerberoasting,” “DCSync,” or “Golden Ticket” thrown around and felt completely lost, this is written for… Continue reading on M

Threat Hunting is also known as cyber threat hunting, is a proactive approach to identifying previous unknown or currently ongoing cyber… Continue reading on Me

Cybersecurity is the process of protecting networks, systems, applications and digital assets from...

OPNsense released critical security updates to fix a root remote code execution vulnerability (CVE-2026-57155) in its GeoIP alias importer. The update also patc

Breach at the Beach is a free Capture the Flag (CTF) built by Varonis Threat Labs to teach defenders how modern attackers abuse Microsoft Entra ID. Based on rea

EvilTokens conceals its phishing workflow behind browser-side AES-GCM decryption, making static URL analysis insufficient for detecting Microsoft 365 device cod

In this write-up, we will walk through the step-by-step penetration testing process for the classic Kioptrix vulnerable machine. This lab… Continue reading on M

If another company had an incident this size, it would be catastrophic. But for StealC, it’s just another day. Continue reading on Medium »

Deep Dive: Swisyn (Trojan_Generic) Today we are analyzing the Swisyn malware family, which...

For decades, popular culture has painted a very specific picture of a cybercriminal: a lone hacker in a dark room, furiously typing green… Continue reading on M

Blockchain payment systems promise transparency, speed, and lower transaction costs — but they also...

Forgetting your password doesn’t mean reinstalling your operating system. Here’s how understanding the Linux boot process helped me regain… Continue reading on

It all started when I became dissatisfied with my approach to deploying personal services. I decided...

Splunk Enterprise for Beginners: Your First Step into SIEM and Log Analysis Continue reading on Medium »

Learn how to get a dedicated IP address via a VPN, ISP, or hosting provider. Find out which option fits your needs and how to purchase one. Continue reading on

I Almost Fell for This “Dream Job” Scam — Here’s How I Analyzed It Continue reading on Medium »

Linux Level 1 Certification Challenge — Day 7 Continue reading on Medium »

New iOS 27 framework helps apps detect when people are being scammed and alert them in real time. Here's what you need to know.

Sending production database credentials or raw data to a cloud-based SQL platform creates an...

Disclaimer: I'm currently learning web security through OWASP and PortSwigger Web Security Academy....

The 2026-07-28 MCP spec is the biggest revision since the protocol launched, and it is not backward...

Cloud technology has transformed the way businesses build and scale their digital infrastructure. It’s flexible, convenient, and… Continue reading on Medium »

In [Part 1] (https://medium.com/@ahmednaoum/cybersecurity-lab-7278776f731d) I got the domain controller running and verified it with… Continue reading on Medium

Part 2 of the Active Directory Home Lab Series (https://medium.com/@keskarshrishailya/active-directory-home-lab-setup-4b6acb321035) Continue reading on Medium »

The OSI Model is a 7-layer conceptual model used to understand and standardize network communication. The TCP/IP Model is a 4-layer… Continue reading on Medium

Cybersecurity is one of the fastest-growing career fields, but many beginners have the same question: Continue reading on Medium »

You’ve been building for users. Hackers have been building for your blind spots. Continue reading on InfoSec Write-ups »

Every DevOps engineer has typed this command countless times: ssh ubuntu@my-server Enter...

OAuth’s core purpose is secure delegation of access, but when apps blindly trust any valid token...

Enterprise-grade endpoint security doesn't have to come with an enterprise price tag. 🔐 Many...

The problem Model Context Protocol servers are powerful — they let AI agents call external...

arXiv:2607.02825v1 Announce Type: cross Abstract: We release \textsc{JavaVulBench}, a benchmark dataset and evaluation harness for Java vulnerability detection.

arXiv:2607.02981v1 Announce Type: cross Abstract: Recent advancements in the Internet of Things (IoT) emphasize the urgent need for advanced network security, a

When was the last time you DOXXED yourself, or had a professional dox you, build an opposition file, dossier, or otherwise build a profile… Continue reading on

Inside the Breach: Auditing My Accounts, Dissecting Real Malware, and Why Entropy Is the Quiet Backbone of Security Continue reading on Medium »

A BitLocker password isn’t always enough to get your files back. Continue reading on Medium »