⤷ Title: Threat Modeling — Because “What Could Go Wrong?” Is Not a Methodology
════════════════════════
𐀪 Author: Robert Broeckelmann
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:53 GMT
════════════════════════
⌗ Tags: #threat_modeling #identity_management #application_security #threat
════════════════════════
𐀪 Author: Robert Broeckelmann
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:53 GMT
════════════════════════
⌗ Tags: #threat_modeling #identity_management #application_security #threat
Medium
Threat Modeling — Because “What Could Go Wrong?” Is Not a Methodology
Threat modeling is one of those security practices that everybody agrees is important, but not everybody agrees on how to do.
⤷ Title: OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I Learned
════════════════════════
𐀪 Author: Mohammed Salah Khaleel
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #oscp #offsec #hacking #pentesting #cybersecurity
════════════════════════
𐀪 Author: Mohammed Salah Khaleel
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:24:18 GMT
════════════════════════
⌗ Tags: #oscp #offsec #hacking #pentesting #cybersecurity
Medium
OSCP+ Review — I Failed the First Time, Passed on the Second, and Here’s Everything I Learned
I had 8 hours left and only needed one more flag. I gave up. I still don’t know why.
⤷ Title: Introduction to Active Directory: What Every Pentester Needs to Know First
════════════════════════
𐀪 Author: Vipin_M
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:50 GMT
════════════════════════
⌗ Tags: #kali_linux #hacking #pentesting #networking #active_directory
════════════════════════
𐀪 Author: Vipin_M
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:07:50 GMT
════════════════════════
⌗ Tags: #kali_linux #hacking #pentesting #networking #active_directory
Medium
Introduction to Active Directory: What Every Pentester Needs to Know First
Walk into almost any internal penetration test and you’ll find the same thing running the show: Active Directory. It’s the system deciding…
⤷ Title: PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
════════════════════════
𐀪 Author: ExploitDNA
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:46:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #security #artificial_intelligence #infosec
════════════════════════
𐀪 Author: ExploitDNA
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:46:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #security #artificial_intelligence #infosec
Medium
PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
Part 1: Introduction, Background, and Why PHP2Shell Matters
⤷ Title: Php2Shell
════════════════════════
𐀪 Author: clwwn
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:10:54 GMT
════════════════════════
⌗ Tags: #php #tryhackme #php2shell
════════════════════════
𐀪 Author: clwwn
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:10:54 GMT
════════════════════════
⌗ Tags: #php #tryhackme #php2shell
Medium
Php2Shell
Upload Progress
⤷ Title: TryHackMe PHP2Shell — Complete Walkthrough
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:58:21 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cve #tryhackme #php
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:58:21 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #cve #tryhackme #php
Medium
TryHackMe PHP2Shell — Complete Walkthrough
PHP2Shell is a PHP runtime vulnerability chain that can lead to memory disclosure and remote code execution (RCE). Unlike application-level…
⤷ Title: Stolen OAuth tokens: what DPoP fixes, and what it doesn’t
════════════════════════
𐀪 Author: Piotr Honik
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:54:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #software_architecture #oauth2 #dpop
════════════════════════
𐀪 Author: Piotr Honik
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:54:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #api_security #software_architecture #oauth2 #dpop
Medium
Stolen OAuth tokens: what DPoP fixes, and what it doesn’t
Where DPoP is now the default, where it falls short, and how to choose.
⤷ Title: China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:31:16 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Malware & Threats #AI #China #China APT #ConnectWise #Microsoft
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:31:16 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Malware & Threats #AI #China #China APT #ConnectWise #Microsoft
SecurityWeek
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.
⤷ Title: Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:58:34 +0000
════════════════════════
⌗ Tags: #Vulnerabilities #Arista #exploited #vulnerability #Zero_Day
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:58:34 +0000
════════════════════════
⌗ Tags: #Vulnerabilities #Arista #exploited #vulnerability #Zero_Day
SecurityWeek
Attackers Exploit Third Arista VCO Zero-Day in Four Months
The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.
⤷ Title: Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:06:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 15:06:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:10:43 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:10:43 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:05:45 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:05:45 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: Speaker-Activated Backdoor Hijacks Speech AI Agents
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:59:40 +0000
════════════════════════
⌗ Tags: #Malware #AI Agents #AI security #Backdoor #machine learning #Speaker_Activated Backdoor #Speech Recognition #Voice Cloning #Whisper
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:59:40 +0000
════════════════════════
⌗ Tags: #Malware #AI Agents #AI security #Backdoor #machine learning #Speaker_Activated Backdoor #Speech Recognition #Voice Cloning #Whisper
Information Security News
Speaker-Activated Backdoor Hijacks Speech AI Agents
A Backdoor That Listens for One Voice Researchers have taught speech recognition systems to recognize a specific person by voice. At that moment, the system secretly changes the person’s wor…
⤷ Title: NS2JB Brings a Switch 2 Jailbreak With Codex Help
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:01:45 +0000
════════════════════════
⌗ Tags: #Technology #Codex #Homebrew #jailbreak #Mario Kart World #Nintendo #Nintendo Switch 2 #NS2JB #SmileBASIC 4
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:01:45 +0000
════════════════════════
⌗ Tags: #Technology #Codex #Homebrew #jailbreak #Mario Kart World #Nintendo #Nintendo Switch 2 #NS2JB #SmileBASIC 4
Daily CyberSecurity
NS2JB Brings a Switch 2 Jailbreak With Codex Help
Researcher Releases a Switch 2 Jailbreak Researcher Sammy Hajhamid has published NS2JB, a jailbreak project for the Nintendo Switch 2 handheld. He built it with help from Codex, which analyzed the…
⤷ Title: Qualcomm Global Layoffs Planned Amid Smartphone Slump
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:13 +0000
════════════════════════
⌗ Tags: #Technology #Cristiano Amon #Qualcomm #Qualcomm Layoffs #Semiconductors #smartphones
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:13 +0000
════════════════════════
⌗ Tags: #Technology #Cristiano Amon #Qualcomm #Qualcomm Layoffs #Semiconductors #smartphones
Daily CyberSecurity
Qualcomm Global Layoffs Planned Amid Smartphone Slump
Global artificial intelligence data centers continue to absorb memory chip capacity at an unprecedented pace. Consequently, skyrocketing DRAM and NAND flash prices have triggered a severe consumer…
⤷ Title: Python Ships Emergency Releases After emSign CA Certificate Incident
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:09:39 +0000
════════════════════════
⌗ Tags: #Technology #certifi #emSign CA certificate #eMudhra #pip #PyPI #Python #Python security release #tls
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:09:39 +0000
════════════════════════
⌗ Tags: #Technology #certifi #emSign CA certificate #eMudhra #pip #PyPI #Python #Python security release #tls
Daily CyberSecurity
Python Ships Emergency Releases After emSign CA Certificate Incident
A security incident involving eMudhra intermediate certificates has forced the removal of the emSign CA certificate from popular trust bundles such as certifi. In response, the Python team pushed …
⤷ Title: How to Protect Your Business Website From Cyberattacks
════════════════════════
𐀪 Author: neyo4africa technologies
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:15:25 GMT
════════════════════════
⌗ Tags: #marketing #cybersecurity #application_security #technology
════════════════════════
𐀪 Author: neyo4africa technologies
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:15:25 GMT
════════════════════════
⌗ Tags: #marketing #cybersecurity #application_security #technology
Medium
How to Protect Your Business Website From Cyberattacks
Cybersecurity
⤷ Title: AI Found the PHP2Shell Flaw Before Hackers Did. Someone Still Got There Four Days Early
════════════════════════
𐀪 Author: Web Dance Pty. Ltd
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:52:17 GMT
════════════════════════
⌗ Tags: #php #hacking #ai
════════════════════════
𐀪 Author: Web Dance Pty. Ltd
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:52:17 GMT
════════════════════════
⌗ Tags: #php #hacking #ai
Medium
AI Found the PHP2Shell Flaw Before Hackers Did. Someone Still Got There Four Days Early
OpenAI, Wiz and Calif used AI to uncover two critical PHP vulnerabilities that knocked government websites offline from Japan to the…
⤷ Title: SBI Data Breach and Korea’s AI-Linked Bank Hacks: The Side Door Is the New Front Door
════════════════════════
𐀪 Author: Web Dance Pty. Ltd
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:39:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #banking #data_breach #fintech
════════════════════════
𐀪 Author: Web Dance Pty. Ltd
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:39:32 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #banking #data_breach #fintech
Medium
SBI Data Breach and Korea’s AI-Linked Bank Hacks: The Side Door Is the New Front Door
State Bank of India confirmed customer records leaked on the dark web, weeks after Shinhan, KB Kookmin and Hana were breached in attacks…
⤷ Title: PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
════════════════════════
𐀪 Author: xC0D3F4TH3R
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:52 GMT
════════════════════════
⌗ Tags: #php_developers #cybersecurity #hacking #security #software_development
════════════════════════
𐀪 Author: xC0D3F4TH3R
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:52 GMT
════════════════════════
⌗ Tags: #php_developers #cybersecurity #hacking #security #software_development
Medium
PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
github : https://github.com/xC0D3F4TH3R/PHP2SHELL-DEFENSIVE-KIT
⤷ Title: >> 5 Web Application Vulnerabilities Every Aspiring Cybersecurity Professional Should Understand
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:59:08 GMT
════════════════════════
⌗ Tags: #vapt #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:59:08 GMT
════════════════════════
⌗ Tags: #vapt #penetration_testing #cybersecurity
Medium
>> 5 Web Application Vulnerabilities Every Aspiring Cybersecurity Professional Should Understand
Web applications are part of our everyday lives. We use them for banking, shopping, communication, education, and business. But behind…