The CyberSec Guru
ServiceNow Customers Hit by Unauthorized API Access – And the Company Knew for Months
A misconfigured ServiceNow REST endpoint exposed customer tenants in. Here's what happened, what attackers accessed, and what you need know
Miasma Just Went Open Source. Here’s What’s Actually Inside It
The Miasma supply chain worm just went open source. We analyzed the full source code - 5-layer obfuscation, GitHub-as-C2, AI tool hijacking etc
CVE-2026-23111: One Inverted Character in Linux’s nftables Hands Attackers Root
CVE-2026-23111 is a use-after-free in Linux's nftables that lets an unprivileged user escalate to root. Working exploits are public. Here's exactly how it works
Yoti Flagged A Playstation User to Authorities for Running GrapheneOS on their Phone
Sony's age-verification partner Yoti reportedly flagged a GrapheneOS user to authorities. Here's what actually happened and why it matters for everyone
Silent Persistence: How Chinese APT ‘VerdantBamboo’ Spent 18 Months Inside Microsoft 365 Using Custom Malware
Discover how Chinese espionage group UNC5221 (VerdantBamboo) used Brickstorm & Plenet to hide inside Microsoft 365 and MSP networks for over 18 months
Hades Descends to PyPI: Miasma Supply Chain Campaign Spreads via Malicious .pth Startup Hooks
Security researchers detect "Hades," a PyPI branch of the Mini Shai-Hulud / Miasma malware lineage. Over 37 packages compromised via .pth startup hooks.
The CyberSec Guru Is Expanding Into Hardware and Telecom Security
The CyberSec Guru is expanding into Electronics Hardware Security and Telecom Security, covering firmware, embedded systems, IoT and more
Active Directory Penetration Testing Mindmap: Full AD Attack Chain
A complete Active Directory penetration testing mindmap covering recon, initial access, enumeration, credential theft, privilege escalation and more
Cybersecurity Mindmap Library: Pentesting, Blue Team, OSINT & Security Tools
Explore a complete cybersecurity mindmap library covering pentesting, blue team, OSINT, web security, compliance, cloud security and much more
Miasma Worm Weaponizes AI Coding Agents: Inside the Microsoft Azure and GitHub Supply Chain Attack Campaign
The Miasma worm targets AI coding agents via GitHub. Learn how the campaign compromised Azure durabletask & caused 73 repos to be disabled
