All Posts
Network Analysis: The Complete Guide to CLI Tools, Packet Sniffers, tcpdump, and Wireshark
Deep technical guide to network analysis: CLI tools, tcpdump BPF syntax, Wireshark filters, promiscuous mode, pcap vs pcapng, tshark, and practical exercises
EU Chat Control Is Back – And This Time It Might Actually Pass (Update: It Has Passed)
EU Chat Control is back in its final legislative round on June 29, 2026. This complete guide covers what Chat Control proposes, the full timeline from 2021, why it keeps returning, and what happens if it passes
Beginner’s Guide to Conquering Enigma on Hack the Box
Conquer Enigma on Hack The Box like a pro with the beginner's HTB writeup. Dominate this challenge and level up your cybersecurity skills
Two new Linux LPEs hit page cache from opposite ends of the kernel
Two new Linux kernel LPEs, CVE-2026-46331 (pedit COW) and CVE-2026-43503 (DirtyClone), corrupt page-cache memory to gain root without touching disk. Working exploits are public
Three Vulnerabilities, One Platform: Why Your Self-Hosted Gitea/Gogs Instance Is Probably Already Owned
Three critical Gitea and Gogs CVEs disclosed in 2026: a CVSS 9.8 auth bypass via X-WEBAUTH-USER header, a stored DOM XSS through Semantic UI's preserveHTML, and an incomplete SSRF fix exposing AWS IMDS credentials
Post-Quantum Encryption: Why the US Is Racing Against a Clock It Can’t See
Post-quantum encryption is no longer theoretical. Full technical breakdown of ML-KEM, FIPS 203/204/205, the HNDL threat, and why the US is migrating
Alibaba Stole Claude’s Brain. Here’s Exactly How They Did It.
How Alibaba-linked operators ran 25,000 fake accounts and 28.8M Claude exchanges to steal Anthropic's AI capabilities via distillation
ShinyHunters MSG Breach: 26M Records, Facial Recognition Dossiers, and a Vishing Attack That Started With a Phone Call
ShinyHunters leaked 45GB of Madison Square Garden data after a vishing attack on Microsoft Entra exposed 26 million records, biometric facial recognition profiles, and secret activist dossiers
Miasma Returns: Leo Platform npm Packages Hit in New Shai-Hulud Supply Chain Wave
A compromised developer account infected 23 Leo Platform npm packages with Miasma malware, using Phantom Gyp binding.gyp execution to compromise 320+ GitHub repositories. Full IOC list inside
Subnetting and CIDR Notation: The Complete Technical Guide
A deep-dive technical guide to subnetting and CIDR notation. Subnet masks, binary math, VLSM, route aggregation, and practical IP design in detail
