Everything we cover, in one place.
Browse categories, the newest articles, tutorials and quizzes. Built for professionals, businesses and curious learners.
Browse by category
6 topicsLatest articles
View all →
LinuxCVE-2026-19478: How to Detect and Mitigate GitLab's Critical 9.4 Code Injection Zero-Day
GitLab released an emergency out-of-band security patch to address CVE-2026-19478, a critical code injection vulnerability rating 9.4 on the CVSS scale. The flaw allows unauthenticated remote attackers to modify or delete public projects, rewrite repository state, and ban maintainers using a single crafted HTTP GraphQL request. Threat intelligence teams confirm that automated, AI-driven exploitation is actively reaching honeypots in the wild, making immediate patching or mitigation critical for
ExploitsActive Zero-Day Alert: Microsoft Confirms Exploitation of CVSS 10.0 Entra ID Flaw Prior to Patch
On Thursday, Microsoft revealed that a critical remote code execution (RCE) vulnerability in Entra ID—the identity engine powering Microsoft 365, Azure, and Dynamics 365—was actively exploited in the wild prior to server-side mitigations. Tracked as CVE-2026-69836 and assigned a maximum CVSS score of 10.0, the flaw allows unauthenticated remote code execution. While Microsoft has patched the infrastructure, the lack of published indicators of compromise (IOCs) leaves enterprise defenders
Latest TutorialsKittySploit
Modular console : search, configure and execute security modules.
LinuxLinux Firewalls: What You Need to Know About iptables and firewalld
In the Linux ecosystem, packet filtering and network address translation (NAT) happen inside the kernel via frameworks like Netfilter and nftables .
LinuxHow to Install Nginx on Ubuntu: PPA/Official Repository, UFW Firewall, and Configuration Structure
An active Ubuntu server instance (Ubuntu 24.04 LTS / 26.04 LTS).
Network SecurityAI-Generated Malware Campaign Scales Threats Through Vibe Coding Techniques
Normal 0 false false false false EN-US X-NONE X-NONE The campaign consists of more than 440 malicious ZIP archives distributed across…
Network SecurityHow AI Puts Data Security at Risk
However, it also brings significant risks to data security.
Latest TutorialsHow to solve network connectivity problems on dedicated servers
To solve network connectivity problems on dedicated servers, start with connection controls (cable, gateway, speed/dupleks), verify IP/snut/gateway, make gateway ping and public hosts, run traceroute/MTR for tracking information, validate. DNS, review firewall/ACL rules, test specific service ports, and collect package capture data/registrees before sending the evidence to your provider.
Latest TutorialsWhat Is Penetration Testing
Penetration testing (pen testing) is a legal and authorized simulated cyber-attack on a computer system to evaluate its security. Pen testers act like real hackers: they use the same tools, techniques, and thinking to find and show weaknesses that could hurt the business.
Hacking ToolsWhat is Vulnerability Assessment
A vulnerability assessment is the process of checking a system to find security weaknesses. The goal is to know whether a system can be attacked, how dangerous the weakness is, and how to fix it.
Hacking ToolsUnderstanding Android Mobile Architecture and Its Security Vulnerabilities
Android is one of the most widely–used mobile operating systems in the world. To run smoothly on millions of devices, Android is built using a layered architecture. Each layer has a specific function that allows applications, system services, and hardware to work together.
Hacking ToolsUnderstanding what Threat, Vulnerability, Risk, Impact, Severity, and assesing Severity based on CVSS
A threat is anything that has the potential to do damage, even if the damage has not happened yet. In this case, a thief who walks around looking for houses to break into is the threat. The thief might or might not attack, but the possibility exists, and that possibility itself is the threat.
Latest TutorialsUnderstanding What IP, Port, and Protocol Is
This topic focuses on understanding the definitions of IP addresses, ports, and protocols, the differences between each of them, as well as commonly used standard ports and the network services that operate on those ports.
LinuxActive Information Gathering in Cybersecurity
In cybersecurity, the first phase of ethical hacking is called Reconnaissance or Information Gathering. This phase focuses on collecting information about a target before attempting any attack or security testing. Information gathering is divided into two main types: Passive Information Gathering Active Information Gathering
ExploitsCaptcha Bypass
Do not send the parameter related to the captcha. Check if the value of the captcha is in the source code of the page. Change some specific characters of the captcha parameter and see if it is possible to. When a new Captcha code is created, the previous code will expire.
Latest TutorialsNetwork Mapping for Beginners: Exploring Networks with Nmap
Network mapping is an early stage in network analysis, cybersecurity, and penetration testing activities. At this stage, the main objective is not to exploit vulnerabilities, but to understand the structure of the network. We want to know what devices exist, which hosts are active, and how the network is organized.
GatheringA Beginner’s Guide to Port Scanning Using Nmap
After identifying active hosts through network mapping, the next step is port scanning. Port scanning aims to determine which network services are running on each host.
LinuxUnderstanding Service Enumeration in Cybersecurity
Service enumeration is an essential stage in ethical hacking and penetration testing. It is performed after the initial information gathering and scanning phases.