Difficulty: Medium Tags: Active Directory, BloodHound, KeePass, Password Spray, RBCD, Kerberos, Impacket

https://tryhackme.com/room/sighunt

Telmetry and runtime behavior across multiple domains (Anthropic, Microsoft Copilot, Bing, Gemini, and MSN). Here’s the layered interpretation of what’s happening: 🧩 Layer 1 — Browser …

Cybersecurity experts recently identified a massive threat to WordPress websites. Specifically, hackers are actively exploiting a critical UpdraftPlus CVE-2026-10795 vulnerability. This dangerous …

Introduction Since there aren’t many resources or write-ups for this specific CTF on TryHackMe, here is a complete walkthrough.

Subtitle:

Platform: TryHackMe Difficulty: Easy

Reversing Challenge

The real difference between cybersecurity, hacking, hacktivism, and everything in between — and why confusing them is dangerous.

NVIDIA recently issued a vital security bulletin for June 2026. Therefore, users must urgently address two severe NVIDIA DALI vulnerabilities. Specifically, these flaws threaten systems running ve…

A critical PhpSpreadsheet RCE vulnerability impacts 312 million users. Learn how the CVE-2026-45034 exploit bypasses patches and triggers code execution.

A new strongSwan CVE-2026-47895 vulnerability allows remote code execution via a libstrongswan double-free exploit. Patch your VPN servers now!

Five new Spring Data vulnerabilities threaten applications with SpEL expression injection and DoS attacks. Upgrade your Spring frameworks immediately!

Domina las vulnerabilidades de divulgación de información: descubre vectores, explota fugas y mitiga riesgos de seguridad web.

Box: Arasaka
Difficulty: Easy
Credentials: faraday:hacksmarter123

A CVSS 9.8 flaw highlights new Splunk Enterprise vulnerabilities. Patch CVE-2026-20253, CVE-2026-20251, and others to prevent remote attacks on your servers.

A new GreatXML BitLocker bypass PoC exploit is publicly disclosed. Learn how this Windows Defender vulnerability grants unrestricted volume access.

A new Dahua security advisory warns of critical Dahua product vulnerabilities, including CVE-2026-29116. Update your IPC and SD devices to prevent DoS attacks.

The ITScape KVM escape vulnerability (CVE-2026-46316) threatens arm64 clouds. Details and a guest-to-host escape exploit PoC are now publicly disclosed.

A critical Jenkins security advisory 2026 warns of deserialization and XSS flaws like CVE-2026-53435. Patch your CI/CD pipelines immediately!