I'm happy to share that I've been working through the OWASP Top 10 on TryHackMe, building my understanding of common web application security risks through hands-on practicals. During this learning journey, I've explored topics including: - Injection— understanding how unsafe in…
https://youtu.be/nBDgaOc-8MY Want to start your cybersecurity journey but aren't sure where to begin? Information Security Tutorials offers educational content designed to help you build a strong foundation in cybersecurity and develop practical skills step by step. 📚 Explore o…
🏆 Voting is open — I need your support! I'm honoured to be nominated for the Arab Cybersecurity Social Media Influencer Award 2026, part of the Arab Security Conference (10th Edition)! This nomination means a lot — it reflects the time we've spent together building real cyberse…
Something shifted in the past few months. Russia, Iran, and North Korea - three separate programs, no coordination - all moved to AI-assisted malware development at roughly the same time. In live attacks, against real targets. Russian hackers deployed malware that connects to a…
Hot take: AI didn't kill bug bounty hunting. It just exposed who was actually good at it. ------ Here's what nobody says out loud — The lazy ones used AI. Copy pasted the output. Hit submit. No verification. No proof of concept. Just confidence. 70% of those reports? Invalid. --…
Most cybersecurity professionals spend their careers mastering tools—Nessus, Qualys, Burp, Nmap, and managing endless SIEM alerts. But throughout the UAE and GCC markets, I’ve observed a consistent truth: Tools get you shortlisted, but critical thinking gets you hired. I have se…
Open-sourced a CORS testing toolkit that tells you whether a misconfiguration is actually exploitable — not just that a header is weak. It checks SameSite, cookie-vs-bearer auth, and whether the endpoint returns anything sensitive, then rates each finding by real impact (base vs…
📢 Shared from CyberShift One of the best pieces of advice I'd give to anyone trying to break into Cybersecurity fast: Stop waiting until you feel "ready." Start building. Here's what that actually looks like in practice: Set up a Virtual Machine (VM) Download VirtualBox or VMwa…
🔐 15 Free Cybersecurity Tools Every Pro Should Have in Their Arsenal The best security professionals don't rely solely on expensive platforms, they master powerful open-source tools that get the job done. Here's your list: 1️⃣ Nmap · Network scanning 2️⃣ Wireshark · Packet anal…
Most beginners think installing Kali Linux or spinning up a few VMs means they've built a cybersecurity home lab. It doesn't. A real cybersecurity home lab isn't a destination - it's a workflow. It means identifying assets, simulating attacks, writing detection rules, ingesting…
Hey community, excited to be here! I'm Ifeoluwa, a Cybersecurity MSc candidate at Edinburgh Napier University in Scotland, graduating in May 2026 with an expected Distinction. My path into cybersecurity came through network engineering, I spent 18 months as a Core IP/Network Ope…
Hey community, I just joined Cyberr and wanted to introduce myself. I'm finishing my Bachelor's in Business Informatics at TH Augsburg, Germany, and I'm looking for my first full-time role in cybersecurity starting April 2026. My path into security wasn't the typical one. Before…
💡A quick lesson from a recent Web Cache Deception (WCD) finding: Don't trust cache headers alone. Before I go on, within the space of 2 weeks, I found 2 WCD vulnerabilities on two different targets! In addition to these two, on a recent target I found another WCD vulnerability.…
When performing web application penetration testing, one of the first and most effective steps is to inspect the page’s source code. Developers sometimes leave behind comments that can expose sensitive information, such as credentials, internal logic, or debugging notes. https:/…
I just created a new group: AppSec & Secure Development! Join us and be part of the conversation. #AppSec #ApplicationSecurity #SecureDevelopment #DevSecOps #OWASP #SAST #DAST #APISeurity #ThreatModelling #SecureCode #MobileSecurity #SecurityChampions #BurpSuite #Cyberr #CyberCo…
I use Burp Suite almost daily in my role as a QA Lead and Application Security Engineer, so in my next video, I’m breaking down exactly how I use it for real-world web application penetration testing. We’ll walk through how to identify and test for vulnerabilities like: • SQL In…
3 years ago, during my ISC board exams, something unforgettable happened. I had studied hard for my Economics paper—revising everything for two full days, right up to the exam morning. But the moment I entered the exam hall, sat down, and filled out the basic details… my mind we…
Jigsaw v5.1 Upgrade: Shifting Focus to Advanced Windows Forensics and Code Remediation When real-world infrastructure throws curveballs, you do not just troubleshoot, you engineer solutions. I am currently working on a major upgrade to Jigsaw (v5.1), which is actively in progres…
Hi everyone, I’m focused on offensive security, especially Web/API pentesting, reverse engineering, security automation, and infrastructure-oriented security labs. My current stack and interests include Burp Suite, Nmap, Kali/Linux, Docker, Ghidra, x64dbg, Python/Go automation,…
📢 Shared from CyberShift If you're serious about breaking into cybersecurity, step away from bootcamps and certificates for now, one recognized entry level cert is good for starters. Focus first on building real, hands-on skills through platforms like Hack The Box and LetsDefen…