Cyber Security & Tech Articles
The Blue Team Cheat Sheet Every One Needs
If you’ve spent any time exploring a career in cybersecurity particularly on the defensive side, you’ve probably encountered the same overwhelming moment many newcomers face. You decide to pursue blue...
Read more...
HackTheBox Expressway Walkthrough
HTB Expressway might be tagged as a beginner-friendly Linux machine, but I’m going to stop you right therem do not let that label fool you into casually skimming through your...
Read more...
Interactive OSCP/CPTS Roadmap: HTB Machines + THM Rooms
There is a very specific, deeply frustrating kind of paralysis that almost inevitably hits you about two weeks into any serious cybersecurity certification prep, and it is crucial to recognize...
Read more...
HackTheBox Guardian Writeup & Walkthrough
This is a TL;DR, due to the length of the writeup, I created the full post here. HTB Guardian is a Linux machine that hides its real attack surface behind...
Read more...
HTB Giveback Writeup & Walkthrough
HTB Giveback Look, if you've spent any time grinding through complex lab environments or knocking out rooms, you already know that some machines are just built different and are specifically...
Read more...
Best AI Security Certifications in 2026 | Expert Breakdown
Look, if you've been hanging around the cybersecurity space for any amount of time lately, you've probably noticed that the ground is completely shifting beneath our feet when it comes...
Read more...
HTB Soulmate Writeup
In HTB Soulmate, we chain together two devastating 2025 CVEs, turning what looks like a standard web server into a lesson on why enterprise file transfer solutions are often the...
Read more...
HTB Signed Writeup
If you’ve been looking for a HackTheBox machine that genuinely sits at the intersection of CTF learning and real-world red teaming, then the recently retired HTB Signed box is worth...
Read more...
False Confidence in the SOC: The YARA Rule Problem
In my recent SOC encounters, I cut through the common misconception that syntactically correct equals operationally safe. A YARA rule that compiles is merely the bare minimum, it’s like saying...
Read more...
Microsoft Office RCE Zero-Day (CVE-2026-21509) Explained
In the relentless cycle of cybersecurity patches and panic, it is easy to become desensitized to the term Zero-Day. However, the recently disclosed CVE-2026–21509 demands our immediate and undivided attention,...
Read more...
GeoServer: CVE-2025-58360 Vulnerability Analysis
If you think XML External Entity (XXE) vulnerabilities are a relic of the past or just theoretical noise, this walkthrough on the GeoServer CVE-2025-58360 is the wake-up call you need....
Read more...
HTB CodePartTwo Writeup
While many boxes challenge you to find a missing patch or a weak password, HTB CodePartTwo machine attacks the fundamental trust developers place in third-party libraries to sanitize execution environments....
Read more...
