Every now and then, a kernel bug comes along that is humbling precisely because it is so small. CVE-2026-23111 is one of those. It is a use-after-free in the Linux kernel’s nf_tables subsystem, and it lets an unprivileged local user climb all the way to root — and break out of a container while doing
CVE-2026-23111: How One Character Gave Away Linux Root Read More »
For a long time I’ve been bouncing between Python tutorials — following along, copying code, feeling like I understood it, then realizing days later that I couldn’t write any of it from scratch. The cure was obvious: stop reading and start building. So I built a small password manager. Nothing fancy: a CLI tool that
Building a Simple Encrypted Password Manager in Python Read More »
What’s exposed Researchers from Intruder scanned over 2 million hosts and found 1 million exposed AI services online. The findings are bad — most LLM deployments ship with insecure defaults, and many sit on the public internet with no authentication at all. This isn’t a hypothetical risk. Real user data, internal company workflows, and production
1 Million Exposed AI Services: How Bad Is LLM Security? Read More »
What happened CVE-2026-29014, a code injection vulnerability with a CVSS score of 9.8, has been discovered in MetInfo CMS versions 7.9, 8.0, and 8.1. This flaw allows remote attackers to execute arbitrary code by sending crafted requests with malicious PHP code. Technical details The vulnerability is rooted in the “/app/system/weixin/include/class/weixinreply.class.php” script and stems from a
MetInfo CMS Vulnerability CVE-2026-29014 Exploited in Wild Read More »
If you work in cybersecurity — or you’re studying to get into the field — you need to pay attention to what just happened. Claude Mythos is here, and it’s about to change everything we know about vulnerability research. On April 7, 2026, Anthropic announced Claude Mythos Preview, a new AI model that sits above
Claude Mythos: The AI Model That’s Rewriting the Rules of Cybersecurity Read More »
Metasploit is a powerful and widely-used framework in the field of penetration testing and cybersecurity. It is used to discover vulnerabilities, develop exploits, and manage exploitation sessions—all within a safe and legal testing environment. This Metasploit tutorial will guide you through the basics of using Metasploit, one of the most powerful frameworks for penetration testing
Metasploit Tutorial – Learn How to Use Metasploit Read More »
Penetration Testing (Pen Test), also known as Ethical Hacking, is the process of simulating a real-world cyberattack against computer systems, networks, or web applications.The main goal is to identify security vulnerabilities before malicious hackers exploit them, and then fix those weaknesses to improve overall security. 📌 This article is also available in Arabic: here Why
What is Penetration Testing (Pen Test)? Read More »
In this article, we’ll walk through SMB enumeration using Nmap, a core skill in the enumeration phase of penetration testing. You’ll learn how NetBIOS and SMB services work, how to scan and analyze them, and how to set up a hands-on lab to practice. Understanding NetBIOS and SMB NetBIOS (Network Basic Input/Output System) NetBIOS (Network
SMB Enumeration Using Nmap – NetBIOS Scanning & Lab Setup Read More »
In this article, we’ll delve into TCP SYN Flood attacks, how they work, and how to perform and detect them using Wireshark. A SYN flood attack is a type of Denial-of-Service (DoS) attack that exploits the TCP three-way handshake. By sending an overwhelming number of SYN packets to a server, attackers exhaust the server’s resources,
Understanding TCP SYN Flood Attacks: How to Perform and Detect Them With Wireshark Read More »
Wireshark is a powerful network protocol analyzer used to monitor network traffic, troubleshoot issues, analyze communications, and secure networks. It captures and displays data from network packets in real-time, allowing you to see every detail of transactions across your network. This makes Wireshark an essential tool for IT professionals, cybersecurity analysts, and network administrators, helping
Wireshark Tutorial: How to Install and Use Wireshark Read More »