CCyber Knight9h ago · 4 min readThe Firm That Audits Everyone's Risk Just Landed on a Ransomware Leak SiteNobody expects the auditors to get audited. On October 22, a new name appeared on the Everest ransomware group's leak site — and it made incident-response people across the world pause mid-scroll: PwCnulltrace.hashnode.dev
CCyber Knight1d ago · 4 min readA CVSS 10.0 Bug Sat Inside GitLab for 12 Years. It Lived in the Regex Engine.Twelve years ago, somebody compiled a regular expression. Not in a browser. In a server-side library called Onigmo — the Ruby regex engine GitLab bundles — quietly turning patterns into executable matnulltrace.hashnode.dev
Vvidit1d ago · 8 min readThe eMudhra Certificate Compromise: The Internet Trusted a Private Key That Was Literally the Number 4Eight intermediate CA keys. A key-generation failure. And a reminder that strong cryptography means nothing if the secret is predictable. That is not a test fixture from a cryptography tutorial. That viditp.hashnode.dev
00x8r41nr072d ago · 12 min readMy InfoSec HomeLabPurpose A small, fully isolated lab for practising both sides of security: attacking deliberately vulnerable targets (Metasploitable 2, OWASP Juice Shop, DVWA, later Active Directory) and detecting thbraindump.0x8r41nr07.xyz
VVikram Kumar Shukla2d ago · 4 min readSBI Cyberattack Case Study: How 3,897 Customer Records Ended Up on the Dark WebOn Wednesday, 21 October 2026, the State Bank of India did something Indian banks rarely do quickly. It told the public, through a stock exchange filing, that it had been hit by a cyberattack and thatvikramkumarshukla.hashnode.dev
CCyber Knight2d ago · 4 min readThey Didn't Steal Your Data. They Stole Your Groceries.Picture this: it's Monday morning and you open your supermarket app to order the week's groceries. The app won't load. The website is down. You drive to the store instead — and half the produce shelvenulltrace.hashnode.dev
SShivam Sharma5d ago · 5 min readiRhythm Data Breach: 368K+ Patients Affected, Up to 8.2M at Risk — What to DoIf you've ever worn a Zio heart monitor — a small patch stuck to your chest for days while it recorded every heartbeat — your personal information may now be in a hacker's hands. iRhythm Technologies,shivam-techreview.hashnode.dev
DDimakatso Sebatane5d ago · 9 min readCase Study: Cross-Tenant Data Exfiltration via Backup RestoreCategory: Web Application SecurityVulnerability: Broken Object Level Authorization (BOLA / IDOR)CWE: CWE-639 — Authorization Bypass Through User-Controlled KeyOWASP: API1:2023 — Broken Object Level Auovawatch-security.hashnode.dev
MMiller EliasOct 16 · 5 min readWhy Most PDF Redaction Fails: The Mechanics of True In-Browser Vector SanitizationOne of the most persistent security mistakes in digital document handling is the pseudo-redaction fallacy: drawing a black visual rectangle over sensitive text and assuming the data is gone. From Pauleliasmiller.hashnode.dev
AAndrew WiggeyOct 16 · 7 min readBuild a Security Data Lake & Deploy AI SOC AgentsThe Cloud SIEM Egress Trap As organizations transition toward automated security operations, telemetry volumes have multiplied tenfold. Many teams attempt to build an AWS Security Data Lake alternativirexta.hashnode.dev
