Cybersecurity

Threat Hunting is also known as Cyber Threat Hunting. Continue reading on Medium »

Hardware-Secured Trading Bots: D'CENT Integration for High-Value DeFi...

If you’ve ever wondered who’s actually responsible when a company gets hacked — or who makes sure it doesn’t — the answer is usually one… Continue reading on Me

Threat hunting : It is also know as cyber threat hunting ,is proactive approach to identifying previously unknow or currently ongoing… Continue reading on Mediu

In this walkthrough, I will explain the steps I took to solve the Royal Loyalty Bellingcat challenge and identify the street shown in the… Continue reading on M

If you’ve ever heard terms like “Kerberoasting,” “DCSync,” or “Golden Ticket” thrown around and felt completely lost, this is written for… Continue reading on M

Threat Hunting is also known as cyber threat hunting, is a proactive approach to identifying previous unknown or currently ongoing cyber… Continue reading on Me

Cybersecurity is the process of protecting networks, systems, applications and digital assets from...

OPNsense released critical security updates to fix a root remote code execution vulnerability (CVE-2026-57155) in its GeoIP alias importer. The update also patc

Breach at the Beach is a free Capture the Flag (CTF) built by Varonis Threat Labs to teach defenders how modern attackers abuse Microsoft Entra ID. Based on rea

EvilTokens conceals its phishing workflow behind browser-side AES-GCM decryption, making static URL analysis insufficient for detecting Microsoft 365 device cod

In this write-up, we will walk through the step-by-step penetration testing process for the classic Kioptrix vulnerable machine. This lab… Continue reading on M

If another company had an incident this size, it would be catastrophic. But for StealC, it’s just another day. Continue reading on Medium »

Deep Dive: Swisyn (Trojan_Generic) Today we are analyzing the Swisyn malware family, which...

For decades, popular culture has painted a very specific picture of a cybercriminal: a lone hacker in a dark room, furiously typing green… Continue reading on M

Blockchain payment systems promise transparency, speed, and lower transaction costs — but they also...

Forgetting your password doesn’t mean reinstalling your operating system. Here’s how understanding the Linux boot process helped me regain… Continue reading on

It all started when I became dissatisfied with my approach to deploying personal services. I decided...

Splunk Enterprise for Beginners: Your First Step into SIEM and Log Analysis Continue reading on Medium »

Learn how to get a dedicated IP address via a VPN, ISP, or hosting provider. Find out which option fits your needs and how to purchase one. Continue reading on

I Almost Fell for This “Dream Job” Scam — Here’s How I Analyzed It Continue reading on Medium »

Linux Level 1 Certification Challenge — Day 7 Continue reading on Medium »

New iOS 27 framework helps apps detect when people are being scammed and alert them in real time. Here's what you need to know.

Sending production database credentials or raw data to a cloud-based SQL platform creates an...

Disclaimer: I'm currently learning web security through OWASP and PortSwigger Web Security Academy....

The 2026-07-28 MCP spec is the biggest revision since the protocol launched, and it is not backward...

Cloud technology has transformed the way businesses build and scale their digital infrastructure. It’s flexible, convenient, and… Continue reading on Medium »

In [Part 1] (https://medium.com/@ahmednaoum/cybersecurity-lab-7278776f731d) I got the domain controller running and verified it with… Continue reading on Medium

Part 2 of the Active Directory Home Lab Series (https://medium.com/@keskarshrishailya/active-directory-home-lab-setup-4b6acb321035) Continue reading on Medium »

The OSI Model is a 7-layer conceptual model used to understand and standardize network communication. The TCP/IP Model is a 4-layer… Continue reading on Medium

Cybersecurity is one of the fastest-growing career fields, but many beginners have the same question: Continue reading on Medium »

You’ve been building for users. Hackers have been building for your blind spots. Continue reading on InfoSec Write-ups »

Every DevOps engineer has typed this command countless times: ssh ubuntu@my-server Enter...

OAuth’s core purpose is secure delegation of access, but when apps blindly trust any valid token...

Enterprise-grade endpoint security doesn't have to come with an enterprise price tag. 🔐 Many...

The problem Model Context Protocol servers are powerful — they let AI agents call external...

arXiv:2607.02825v1 Announce Type: cross Abstract: We release \textsc{JavaVulBench}, a benchmark dataset and evaluation harness for Java vulnerability detection.

arXiv:2607.02981v1 Announce Type: cross Abstract: Recent advancements in the Internet of Things (IoT) emphasize the urgent need for advanced network security, a

When was the last time you DOXXED yourself, or had a professional dox you, build an opposition file, dossier, or otherwise build a profile… Continue reading on

Inside the Breach: Auditing My Accounts, Dissecting Real Malware, and Why Entropy Is the Quiet Backbone of Security Continue reading on Medium »

A BitLocker password isn’t always enough to get your files back. Continue reading on Medium »

It is 2:00 AM. You are staring at the ceiling, wondering if the “Critical” alert that just hit your PagerDuty is a false positive or the… Continue reading on Me

An in-depth walkthrough of a phishing investigation, from fraudulent SMS messages to administrative panel analysis and security… Continue reading on Medium »

The Risk Management Framework, its seven steps, told as one story instead of a checklist. Continue reading on Medium »

Why CT Logs Matter for Infrastructure Discovery Continue reading on Medium »

As I continue building my hands-on cybersecurity skills, I recently completed another lab from the PortSwigger Web Security Academy. This… Continue reading on M

Unauthenticated CRUD and Sensitive Data Exposure in 9Router API Endpoints Vulnerability...

CVE-2026-55790: DOM-Based Cross-Site Scripting in Craft CMS Support Widget Vulnerability...