Frank Karani — Cybersecurity Specialist | #1 Rank Globally at CTFZone 2026 🏆 | #2 Rank East Africa at intervarsity 2026🏆 |Top 50 TCRA CyberChampions 2025/26 🇹🇿 | Top 1%globally 0xE [GUARDIAN] TryHackMe | Infrastructure Security & Penetration Testing | Student at IAA
🏆 Officially Secured Rank #358 Globally in TryHackMe "It's Downtime!" CTF Event! 🌍 First and foremost, I would like to express my deepest gratitude to the Almighty God. This stands as my greatest and most meaningful achievement of the year, marking an incredible milestone at t…
Nearly 11,000 cybercrime networks dismantled in major international operation across Africa Twenty-one countries took part in Operation Serengeti III, which led to 1,462 arrests and the recovery of more than $105 million linked to criminal activities. The operation, codenamed Se…
"Why would anyone bother targeting us?" might be one of the most expensive questions an organization can ask when it's being used to justify doing nothing. I've heard variations of that argument throughout my career, usually somewhere between a CTI assessment identifying a credi…
Victor Manuel Font Jr — Keynote Speaker | Strategic Technology Leader | Fractional CIO | IT & Cyber Governance Expert | Published Author | FedRAMP Readiness | Board-Level Advisor | Digital Transformation | Enterprise WordPress/Formidable Forms
I got 3/3 on today's Cyberr daily challenge (Incident response, senior level). Think you'd beat me? https://cyberr.ai/daily/2e14ddf7-f653-477b-b6d6-58956c6a49a6
“Kali Linux 2026.3 Released With New Security Tools, Easier Custom Builds and Expanded NetHunter Capabilities” indicates a major update to Kali Linux, the penetration testing and security assessment distribution maintained by Offensive Security. What is Kali Linux? Kali Linux is…
“Tomorrow, 1:00 PM ET: Watch an Attacker Log In Without a Password & Stay In After the Reset” is the kind of headline commonly used to promote a cybersecurity webinar or demonstration focused on identity attacks , particularly attacks that target authentication tokens, sessions,…
“PHP Releases Emergency Windows Security Update To Fix Critical Brotli Decoder Vulnerability” highlights a serious security issue affecting PHP deployments on Windows that use the Brotli compression library. What is Brotli? Brotli is a compression algorithm developed by Google a…
https://youtu.be/kIG2ffjUrXU في الفيديو ده من مجتمع Information Security Tutorials هنناقش أبرز الثغرات الأمنية اللي اتكشفت في Node.js خلال أكتوبر 2026، وهنفهم ليه تحديثات الأمان الخاصة بالـ Runtime والـ Dependencies ممكن تكون حاسمة في حماية تطبيقات الويب والأنظمة اللي بتعتمد علي…
A critical flaw threatens websites worldwide. Millions of California student records are exposed. An AI coding service suffers a security breach. This week's cybersecurity news reveals a common concern: even when we take precautions to protect our devices and accounts, the servi…
29 minutes. That's how little time defenders may have before an attacker starts moving laterally. Think about what your security team can realistically accomplish in 29 minutes. Investigate an alert. Identify the affected endpoint. Determine whether the account is compromised. C…
I’ve been developing PhilSIEM, my own hands-on cybersecurity project, combining honeypot monitoring, threat intelligence and security event analysis. The goal is to build a practical environment for detecting suspicious activity, investigating alerts and developing real-world SO…
My journey through cybersecurity has been a tough yet interesting one. I have always dreamed of applying my acquired skills professionally, no matter how small the opportunity. To God be the Glory, that dream is becoming a reality! I’m excited to announce that I have been select…
What happens when the internet-facing part of your business becomes the target of a traffic tsunami? DDoS attacks are becoming increasingly difficult to ignore. Cloudflare reported a 519% increase in hyper-volumetric DDoS attacks during the first half of 2026, with attacks incre…
Critical security issue affecting PHP he NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619). What has happened? PHP has published a security update to address a critical security issue th…
Schomer — Principal Security Solutions Architect & Founder
AI is discovering RCE vulnerabilities (like php2shell) faster than human teams can patch them. Taking websites offline shouldn't be your incident response plan. If your security isn't embedded at Layer Zero, you're just renting safety until the next zero-day drops. Build determi…
Your EDR says “no malware detected.” Should you be relieved? Not necessarily. CrowdStrike's 2026 Global Threat Report found that 82% of detections in 2025 were malware-free. It also reported an 89% increase in attacks by AI-enabled adversaries. This tells us something important…
https://youtu.be/jxJujICo9xc في الفيديو ده من مجتمع Information Security Tutorials هنتكلم عن ثغرات PHP2Shell اللي ظهرت في أكتوبر 2026، وليه الثغرات اللي بتصيب الـ PHP Runtime ممكن تمثل خطورة كبيرة على خوادم الويب والتطبيقات اللي بتعتمد عليه. هنناقش الثغرتين CVE-2026-109618 وCVE-…
Nikki Webb — Cybersecurity is not just technical, it is human | Protecting people, businesses & resilience
#PHP2Shell has everyone rattled this week. Here is the calm version. Two critical flaws in PHP itself. Fixes are out. The National Cyber Security Centre says patch now. Most teams will update the servers they know about. The breach risk sits in the ones they don’t. The forgotten…
Schomer — Principal Security Solutions Architect & Founder
AI found the bug. Humans took the blame. Meanwhile, the internet went dark. The current global PHP crisis (php2shell) forced entire government and healthcare networks in Europe to literally pull the plug and go offline. Why? Because an AI discovered a remote code execution (RCE)…
Before the Ransomware Attack: The Initial Access Broker Economy Not every ransomware operation begins with the ransomware group gaining initial access. In some cases, that access may already be available through an Initial Access Broker (IAB). Compromised VPN credentials, expose…
Schomer — Principal Security Solutions Architect & Founder
Under the Hood: Real-Time STIX 2.1 Telemetry of a Blocked PHP2Shell Cascade When an automated exploit cascade hits your environment, you don’t have time to wait for a database write or an application-layer parsing loop. True security requires capturing, validating, and stripping…