Frank Karani — Cybersecurity Specialist | #1 Rank Globally at CTFZone 2026 🏆 | #2 Rank East Africa at intervarsity 2026🏆 |Top 50 TCRA CyberChampions 2025/26 🇹🇿 | Top 1%globally 0xE [GUARDIAN] TryHackMe | Infrastructure Security & Penetration Testing | Student at IAA
🏆 Officially Secured Rank #358 Globally in TryHackMe "It's Downtime!" CTF Event! 🌍 First and foremost, I would like to express my deepest gratitude to the Almighty God. This stands as my greatest and most meaningful achievement of the year, marking an incredible milestone at t…
If you don't have the professional experience, build it yourself. For the past year I've been using Microsoft Entra ID to manage all objects within my (fictitious) healthcare startup, OSHA, including user accounts, group accounts, devices and applications. OSHA operates across m…
"Why would anyone bother targeting us?" might be one of the most expensive questions an organization can ask when it's being used to justify doing nothing. I've heard variations of that argument throughout my career, usually somewhere between a CTI assessment identifying a credi…
Schomer — Principal Security Solutions Architect & Founder
framework engine. I just locked in the architecture showcase for the Build With AI Hackathon. Built completely from scratch as a solo backend developer on a non-rooted Android device running Termux, the ETBV gateway engine achieves absolute logic assurance. The Metrics: • Valid…
“Kali Linux 2026.3 Released With New Security Tools, Easier Custom Builds and Expanded NetHunter Capabilities” indicates a major update to Kali Linux, the penetration testing and security assessment distribution maintained by Offensive Security. What is Kali Linux? Kali Linux is…
A compromised developer account can become a production security incident. Developers routinely work with credentials that connect them to valuable systems: Git repositories. Cloud consoles. CI/CD pipelines. AI coding assistants. Package registries. Databases. Production APIs. I…
I’ve been developing PhilSIEM, my own hands-on cybersecurity project, combining honeypot monitoring, threat intelligence and security event analysis. The goal is to build a practical environment for detecting suspicious activity, investigating alerts and developing real-world SO…
A critical flaw affecting 70% of all websites has the cybersecurity world panicked Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites. Left unfixed, the flaw would allow hackers to easily take ov…
Jason Murray — Strategic Information Security Leader Championing Quantified Risk Analysis and Security Process Improvement.
I read every primary report behind the nine AI "escapes" of 2026: the OpenAI agents at Hugging Face, Anthropic's four, AISI's, Meta's, Moonshot's, and the DseWiki case. I found nine leaks, and nine groups of people who built the environments and then, to their credit, wrote most…
Your EDR says “no malware detected.” Should you be relieved? Not necessarily. CrowdStrike's 2026 Global Threat Report found that 82% of detections in 2025 were malware-free. It also reported an 89% increase in attacks by AI-enabled adversaries. This tells us something important…
https://youtu.be/jxJujICo9xc في الفيديو ده من مجتمع Information Security Tutorials هنتكلم عن ثغرات PHP2Shell اللي ظهرت في أكتوبر 2026، وليه الثغرات اللي بتصيب الـ PHP Runtime ممكن تمثل خطورة كبيرة على خوادم الويب والتطبيقات اللي بتعتمد عليه. هنناقش الثغرتين CVE-2026-109618 وCVE-…
Nikki Webb — Cybersecurity is not just technical, it is human | Protecting people, businesses & resilience
#PHP2Shell has everyone rattled this week. Here is the calm version. Two critical flaws in PHP itself. Fixes are out. The National Cyber Security Centre says patch now. Most teams will update the servers they know about. The breach risk sits in the ones they don’t. The forgotten…
Ahmad Temitope — Threat Intelligence and Research Analyst
Hello Cyberr.ai! My name is Ahmad Temitope, and I am a Cyber Threat Intelligence and Research Analyst specializing in External Attack Surface Management (EASM), detection engineering, and threat analysis. Over the past few years, I’ve had the privilege of working across security…
Schomer — Principal Security Solutions Architect & Founder
Under the Hood: Real-Time STIX 2.1 Telemetry of a Blocked PHP2Shell Cascade When an automated exploit cascade hits your environment, you don’t have time to wait for a database write or an application-layer parsing loop. True security requires capturing, validating, and stripping…
Mihai Camburov — Senior Offensive Security | Penetration Testing | Ethical Hacking | OSCP · CCIE Security | DefendSec Turning OSINT & penetration testing findings into real risk visibility.
Before You Run That PoC, Treat It Like Malware When a critical vulnerability is disclosed, security researchers and pentesters naturally want to validate exposure quickly. And that is exactly what makes fake Proof-of-Concept exploits effective. The recent PHP2Shell disclosure is…
A vulnerability in PHP just turned a programming language into a cybersecurity headline. Two critical vulnerabilities. CVE-2026-109618 CVE-2026-109619 Both carry a CVSS v4.0 score of 9.2 and can enable unauthenticated remote code execution on affected PHP systems. What makes thi…
Your security logs may already contain the evidence of a breach—you just haven't connected the dots. That's one of the hardest problems in cybersecurity. An attacker doesn't always trigger a dramatic alert. Sometimes it's: A login at an unusual time. A new MFA device. A privileg…
Supermarket fridge hacking attacks due to lack of basic cybersecurity measures, expert says French investigators on Tuesday were hunting the hackers who seized control of cooling units at hundreds of supermarkets in a cyberattack that underlined the vulnerabilities of connected…
Schomer — Principal Security Solutions Architect & Founder
Samuel Watua Soita dropped an excellent point recently about how AI is rewriting the economics of phishing. The takeaway is clear: We can no longer train users to spot fakes when the fakes are mathematically perfect copies. Traditional awareness training looks at the perimeter—b…
Hello everyone! I'm Rylan Dansereau, a recent cybersecurity graduate from Florida International University, based in Miami, Florida. I'm currently seeking entry-level opportunities in cybersecurity, particularly in security operations, threat intelligence, network security, and…
Schomer — Principal Security Solutions Architect & Founder
Moving Validation Before Allocation: Securing Agentic Commerce at Layer Zero As automated transaction networks and autonomous AI agents take over global checkout paths, application security interfaces are facing a catastrophic engineering gap: traditional Web Application Firewal…
For those working in SOC L2 what are you guys seeing lately in real-world investigations? I’m curious about what’s actually changing in the way you investigate alerts, hunt for threats, and build detection rules. Any new techniques, tools, or approaches that have made a real dif…
Schomer — Principal Security Solutions Architect & Founder
The backup server is the ultimate cybersecurity blind spot. Organizations spend millions hardening the edge infrastructure, yet leave critical backup systems quietly trusted inside the perimeter. Threat actors know this. If an attacker gets an unauthenticated root shell on an Ah…
AI didn’t change what attackers want. It changed what it costs them to get it. People ask me whether AI is good or bad for security. I think that’s the wrong question. The better question is: who gets more out of each dollar spent on AI? Right now, the answer depends on where yo…