TL;DR Horizon3 has published a technical deep dive and proof-of-concept exploit for CVE-2026-106173, a critical FortiSIEM vulnerability rated CVSS 9.4. The flaw lets an unauthenticated attacker wr…

At a glance Actor Operator using the alias “k0t,” with suspected collaborators; possible initial access broker Activity Mass scanning, exploitation, and brute-forcing of network edge d…

Howdy cowboys! This write-up is a quick note about how and why I developed this tool. Although I’ve been using a version of this internally…

I woke up on Wednesday to a timeline full of the same three words: “patch PHP now.”

PHP, GitLab, LiteLLM and a broken certificate authority, all in one week. Here’s what happened and exactly what to do.

Ok you all heard of the php2shell attack these two days. Now for some reason, the web server that I am the administrator of, the php…

I just finished the TryHackMe room on PHP2Shell, and this is what I learned:

Task 1

Overview

After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016.

At a glance Malware family Custom Meterpreter-style backdoor (versions 1.1.5 and 1.1.7) Threat actor BRONZE SANDCASTLE; suspected China-based Targets Organizations in the Philippines, Taiwan, Afgh…

PHP remains one of the most widely deployed server-side languages on the web. Understand the four confirmed attack chains, how Intigriti is responding, and what steps you should take to protect your infrastructure.

Browsers give web pages a way to talk to each other across different origins when they genuinely need to — an embedded payment widget…

Ever walk out of a pentesting interview thinking, “Wait… did they ask me anything except Active Directory?” Turns out, over 70% of security…

Author: Affanhaxor Platform: CyLab Security Academy Category: Web Exploitation Topics: JSON Web Tokens (JWT), HMAC-SHA256, Authentication…

Cybersecurity is a field where consistent learning, practical exploration, and understanding the fundamentals are essential.

The American laboratory giant is investigating unauthorised access to a system used to retrieve patient results. The number of people…

I have a WordPress project running on PHP 8.3.6, and on Wednesday the version I need to be on became 8.3.36. That is the whole of my…

Stealing someone else’s session cookie through a stored XSS, then reversing it on a machine they’ve never touched

TryHackMe Tempest Walkthrough: Investigating a Complete Windows Attack Chain

Introduction: The Digital World Needs Cybersecurity Experts