🚀 Excited to share my latest Governance, Risk, and Compliance (GRC) project completed on Cyberr, where I engineered an audit-ready, mini-Information Security Management System (ISMS) from the ground up. Simulating the role of a Cybersecurity Governance, Risk and Compliance Cons…
The headline suggests that OpenBSD 8.0 introduces three major areas of improvement: Stronger security controls : OpenBSD is already known for its security-first design, so this likely includes additional kernel hardening, stricter privilege separation, improved memory-protection…
My resume has a step backward in it. Senior Engineer, then Manager, then Senior Engineer again. Most people would parse that as a step down. It's also how I found out what I actually want to do all day. Years ago, the manager of the engineering and security team I was on moved t…
“We use passkeys, so phishing can't get us.” I wouldn't be so confident. Passkeys are a major improvement in authentication security. But attackers are adapting around the technology rather than simply attacking the cryptography. Microsoft has documented active campaigns where a…
I'm happy to share that I've been working through the OWASP Top 10 on TryHackMe, building my understanding of common web application security risks through hands-on practicals. During this learning journey, I've explored topics including: - Injection— understanding how unsafe in…
Let's assume a hardening chain of thought. Suppose that you got hired to harden a business that appeals to two distinct types of clients: public and private. Public clients' concerns include GDPR and PII protection, while private clients' concerns include legal disclosures, conf…
When Everyday Technology Becomes a Target Cybersecurity isn't just about stolen passwords or hacked computers. This week, cyberattacks disrupted grocery-store refrigeration systems, researchers uncovered malware installed on new Android phones, and attackers found a way to obtai…
Frank Karani — Cybersecurity Specialist | #1 Rank Globally at CTFZone 2026 🏆 | #2 Rank East Africa at intervarsity 2026🏆 |Top 50 TCRA CyberChampions 2025/26 🇹🇿 | Top 1%globally 0xE [GUARDIAN] TryHackMe | Infrastructure Security & Penetration Testing | Student at IAA
🏆 RECORD-BREAKING WIN: We are officially in the GRAND FINALS! 🇹🇿 I am incredibly proud to share that my team, S3C_144, representing the Institute of Accountancy Arusha (IAA), has secured a spot in the Top 5 Finalists for the East Africa Intervarsity CTF 2026! Out of 220+ form…
Frank Karani — Cybersecurity Specialist | #1 Rank Globally at CTFZone 2026 🏆 | #2 Rank East Africa at intervarsity 2026🏆 |Top 50 TCRA CyberChampions 2025/26 🇹🇿 | Top 1%globally 0xE [GUARDIAN] TryHackMe | Infrastructure Security & Penetration Testing | Student at IAA
24 Hours. 10,250 Points. Historic Top 2 Finish in East Africa! 🏆🇹🇿 First of all, I would like to thank God for His ultimate glory and continuous guidance throughout this intense journey. 🙏✨ If you told me 5 months ago when I first walked through the gates of the Institute of…
Schomer — Principal Security Solutions Architect & Founder
⚡ ARCHITECTURAL DEEP-DIVE: Execution Layer Nullification in Safe Proxies If you want to understand how a hot/warm wallet gets drained for nine figures in minutes, you have to stop looking at compromised private keys and start looking at Initializer Gates. The most catastrophic s…
Understanding TOR Operations: An Anonymity & Dark Web Intelligence Framework. TOR remains one of the most misunderstood tools in modern cybersecurity. While many view it solely as a privacy browser, it functions more accurately as an anonymity infrastructure layer that enables b…
A full year of grinding! 🥹 I just reached my 365 days without learning fault on TryHackMe 🙂 ↕️ As a reminder, it is a platform where you can learn and practice a ton of concepts around cybersecurity: system, network, web, cryptography, pentest, etc. I really focused on the Jr…
Security controls are not products you buy. They are intentional design decisions that translate threat understanding into protective, detective, and responsive capabilities. Too many organizations treat security like a shopping list: "We bought an EDR, we have a firewall, we're…
Dr. Moawiah Sulieman El-Dalahmeh — Cybersecurity Assistant Professor
From Cybersecurity Academia to Industry — Seeking My Next Opportunity in the UK After several years working across cybersecurity research, higher education, and applied security projects, I am now taking an important step in my career: transitioning from academia into the cybers…
Author: Kennedy Aikohi Event: SANS Skills Quest EuroCTF Final Representation: Germany Result: 4,780 points, 100 percent completion, 29th position in Europe Classification: Sanitized public edition Report date: June 12, 2026 Introduction I recently completed the SANS Skills Quest…
Europe moves to secure sovereign cybersecurity and chips Europe’s push for sovereignty over its digital systems has new developments in cybersecurity and semiconductor manufacturing. New initiatives from Palo Alto Networks, Deutsche Telekom, GlobalFoundries and Qualinx show how…
If your organization still views security as a perimeter problem, the adversary has already moved two stages to the right in the MITRE ATT&CK matrix. The modern kill chain is no longer defined by noisy port scans and service malware droppers. Today's adversarial methodologies ar…
FTP Search: The Overlooked OSINT Goldmine: FTP search is the practice of locating files, directories, and indexed content on publicly reachable FTP servers. These indexes frequently contain installers, backups, documents, or configuration files never intended to be widely discov…
Password managers are usually marketed as user hygiene—a way to stop reusing passwords. For OSINT practitioners, Red Teams, and defenders, they play a much deeper role in persona management, operational security, and post-exploitation analysis. In the current landscape, they are…
Adrien R. R. — CTI Leader | 5G/Telecom Security | AI Integration | Detection Engineering | Attack Surface Management | ex-NATO
🛡️ Just released: PowerAudit 3.2 / a free open-source Windows security audit tool for Blue Teamers & sysadmins. 🔍 Run 46 read-only audit modules on any Windows machine / firewall, antivirus, accounts, encryption, persistence, forensics, MITRE ATT&CK and more. 📊 Get a self-con…
The Anatomy of a Crisis: Standardizing the Ransomware Timeline When a ransomware attack hits, the immediate response inside a Security Operations Center is usually pure chaos. Everyone wants to know what happened, how it happened, and how fast it is spreading. Because of that pa…
Confidentiality is not encryption. A common mistake we see in 2026: teams declaring "we're secure" simply because their data traffic is fully encrypted. Encryption protects data in transit and at rest. It does completely fail to protect data in use, in process, or sitting expose…
David P. Lafleur — Director - Information Security and Technical Operations
The Snyk Wars: A License to Snyk Is Not a Security Program Monday, 9:14 AM — The Pentest Report Lands The security firm delivers its findings. Three of them sit in the particular shade of deep, bold red reserved for "drop what you are doing and stop reading email": An unauthenti…
@Laurent, these are all well-known protocols. But how many of us use this one? HPHLP: Happy Partner, Happy Life Protocol Protocol Name: HPHLP Full Name: Happy Partner, Happy Life Protocol Layer: Domestic Application Layer Transport: Usually TCP — Thoughtful Communication Protoco…