Cybersecurity

JavaScript, PowerShell, Reflective .NET Loader Continue reading on Medium »

Welcome to this new Medium post. In this one, we are going to look at two very simple ways to bypass or evade Guard Pages placed within… Continue reading on Med

Your business can take years to build and only one overlooked risk to damage what you’ve built. Continue reading on Medium »

When I first decided to learn cybersecurity, I had one big problem. I didn’t know where to start. There were networking courses, Linux… Continue reading on Medi

Why some of the easiest security findings are hiding in plain sight Continue reading on Medium »

Technology is moving faster than ever, and with it, so are the ways scammers try to steal money and how authorities try to stop them. Here… Continue reading on

This write-up documents my analysis and the investigation that started with a single suspicious executable named void.exe Continue reading on Medium »

Google’s September Android update fixes 180 security flaws, including critical bugs. Learn how to check your phone’s security patch level. The post 180 Android

A cyber attack rarely starts with some complicated piece of malware. More often, it starts small. An attacker finds the right target… Continue reading on Medium

A different angle on why phishing works, and what to do about it! Continue reading on Medium »

That “Share” button feels like sending a text message. But it actually works more like putting up a web page. Continue reading on Medium »

I used to think my phone was one of the safest things I owned. Continue reading on Medium »

GitHub’s September 9 update adds a useful merge gate. A beginner’s recovery plan still needs two separate finish lines: a safe credential… Continue reading on M

GitHub’s September 9 update adds a useful merge gate. A beginner’s recovery plan still needs two separate finish lines: a safe credential… Continue reading on M

GitHub’s September 9 update adds a useful merge gate. A beginner’s recovery plan still needs two separate finish lines: a safe credential… Continue reading on M

Complex attacks that required years of specialized experience and skills are now executed by operators whose only real capability is knowing what to ask for.

Ever heard of a $45 million breach caused by a single AWS misconfiguration? It happens more than you’d think. Cloud architecture is a… Continue reading on Mediu

I’ve spent years in security. I’ve watched companies promise privacy while quietly doing the opposite. I’ve seen terms of service that… Continue reading on Medi

On August 12, 2026, amid little to no fanfare, the U.S. Government issued a National Security Presidential Memorandum authorizing vetted… Continue reading on Me

Every day, millions of PDFs are uploaded to online converters, exposing sensitive data to unnecessary risk. But there’s a better way… Continue reading on Medium

While testing a web application, I came across an interesting attack chain that started with what initially looked like a simple file… Continue reading on Mediu

# The Lost Knowledge: A Cybersecurity and Knowledge Management Challenge Continue reading on Medium »

The Incident: In summary of the incident, The staff of the University (IT staff to be specific) has fell for one of the most dangerous… Continue reading on Medi

Everyone in security tells you to “do CTFs.” Nobody tells you what happens when you actually open one. Continue reading on MeetCyber »

Le jour où j’ai commencé à faire confiance à mon agent d’infrastructure n’est pas celui où il a réussi une action. C’est celui où il a… Continue reading on Medi

1. What knowledge assets of the university were affected by the cybersecurity incident? Continue reading on Medium »

I’ve recently started taking cybersecurity more seriously and decided to document my progress here. Continue reading on Medium »

Poor knowledge management is not just a confusing concern; it is also, potentially, a security concern. Continue reading on Medium »

As part of my cybersecurity training, I recently had my first practical session with Wireshark. Continue reading on Medium »

Healthcare organizations hold some of the most sensitive information in the world. Patient identities, medical information, insurance… Continue reading on Mediu

How proxy servers mask your IP address and protect your identity while you browse, research, or collect data online. Continue reading on Medium »

The CVE Program will host a “CVE Program Fall Technical Workshop: Advancing CVE Record Quality” virtual event for CVE Numbering… Continue reading on Medium »

Getting to know what NetworkMiner is, it’s use during network forensics, and a whole tool overview. Continue reading on Medium »

Promotional offers can make an unfamiliar platform look attractive, but bonuses sometimes create the exact moment when users stop checking the details. That is

Bad actors are no longer waiting until after an account exists. They are entering through the talent process itself.

Inventory is a snapshot. The thing it is trying to measure is a moving picture.

I was looking through an Angular JavaScript bundle when I noticed a credential that shouldn’t have been there. Continue reading on Medium »

An Honest Top-5 Comparison Continue reading on Medium »

Practical lessons on .env, process.env, configuration validation, production environments, secret management, and the mistakes I learned… Continue reading on Me

Millions of IPs mean nothing if you don’t know where they came from. Continue reading on Medium »

Task 1 — What are Packets and Frames Continue reading on Medium »

Attackers exploit legitimate mailing channels to demand crypto wallet backups

Continue reading on Medium »

The acronym appendix at the back of the SY0-701 objectives lists more than three hundred entries. People often suggest memorizing it, and… Continue reading on M

A framework-neutral PHP façade for OpenID4VP verification, tested against a real verifier. Continue reading on Medium »

Three cybersecurity terms I initially saw as closely related, and what I’ve learned about how they differ. Continue reading on Medium »

You did the homework on your CPU. You read the shortage headlines, ran the framework, bought the chip that matched your actual workload… Continue reading on Med

LONDON, UK, September 10, 2026 — At-Rack, a leader in high-security data sanitisation and physical destruction, is proud to announce a new… Continue reading on