LLakshay Dhoundiyal·Aug 26Browser-in-the-Browser Attack: How Fake Login Windows Steal Real PasswordsA login popup can look exactly like the real thing. The problem is, your eyes may not be able to tell the difference.10 min read·lakshaydhoundiyal.hashnode.dev2
YYogeshwar Peela·Aug 11TryHackMe : The London Bridge writeupTryHackMe London Bridge walkthrough covering SSRF, loopback bypass, root HTTP server, SSH key theft, symlink abuse, and Firefox credential recovery.18 min read·exploitnotes.hashnode.dev11N
SSagun·Aug 5TrickBotThe Malware That Became a Cybercrime Swiss Army Knife7 min read·sagunwrites.hashnode.dev
JJennifer Zack·Jul 14The Rise of Infostealer Malware: Why Your Password Might Already Be for SaleNo ransom note, no warning — infostealers silently steal passwords, cookies & crypto. Learn how they work and how to protect your accounts.6 min read·cybersage.hashnode.dev
4404 Founders·Jun 24FortiBleed: 86,000 Firewalls Compromised by Default PasswordsHalf of all internet-facing FortiGate devices had their credentials stolen. The root cause is embarrassingly simple.3 min read·404-founders.com
SStephanie Anderson·Jun 17Discover Credentials and Privileged Accounts Before Cyber Attackers DoCredential discovery finds unknown, unmanaged credentials that enable attacks. Discover privileged, local admin accounts, and enforce least privilege.8 min read·stephanie-anderson.hashnode.dev
VVũ Nhật Lâm·Apr 20The Underground Access Economy: Storm Infostealer and the Era of Passwordless AttacksExecutive Summary In early 2026, Varonis Threat Labs identified Storm — a new infostealer circulating on underground cybercrime networks for under $1,000 per month. Storm is not simply another commodi13 min read·blog.fiscybersec.com1
VVirusis Blog·Apr 303/04/2026 Cyber Security Briefly News - Escalating Cloud Supply Chain Attacks and Widespread Credential Theft Drive Urgent Security Posture Shifts⏱️ Concise Cyber Intel: Time-Saving Strategic Analysis for Pros6 min read·blog.virusis.com
OOghenemaro Ikelegbe·Mar 31Pass-the-Hash AttacksThink of a thief making an exact copy of your house key just by looking at a picture. That's similar to how a Pass-the-Hash attack operates, and it's one of the sneakiest ways hackers break into compu5 min read·cybersage.hashnode.dev
SSteven Stone·Mar 12Storm-2561 Weaponizes SEO to Push Malicious VPN SoftwareRussian threat group Storm-2561 is using search engine optimization tricks to distribute fake VPN clients that steal credentials. Here's how they're doing it.4 min read·redsheeptrends.hashnode.dev
