Blog (64)

Expert insights, tutorials, and analysis from the frontlines of offensive security.

Articles

SMS 2FA Is No Longer Safe: FIDO2, Passkeys and MFA in 2026

Top 10 Cybersecurity Threats to Watch in 2026

Cloud Security Career Roadmap: Skills, Tools, Labs, Growth

Build a Personal Cybersecurity Lab: Pentest, SIEM, Forensics

Malaysia Cybersecurity Career Plan: Skills, Labs, Roles

SOC-to-Pentest Career Path: Blue Team to Offensive Security

How to Write a Pentest Report: Evidence, CVSS, Remediation

Interpretable Random Forest for Phishing Email Detection

Cloudflare Security for Public Apps: WAF, DNS, Rate Limits

Docker Hardening for Security Labs: Safer Containers

GitHub Actions Security Checklist: CI/CD Hardening Guide

GCP Security Baseline: IAM, Logging, Network, Storage

AWS IAM Misconfiguration Patterns: Cloud Security Lessons

Incident Response Playbook for Small Teams: Practical Steps

Snort Rule Tuning: Reduce False Positives, Keep Visibility

Wireshark Incident Response: Packet Analysis for Triage

ELK Threat Hunting Basics: From Logs to Investigations

Splunk Detection Rules for Common Web Attacks: SOC Guide

Exploit Validation Without Damage: Safe Proof in Pentests

CVSS Reporting: Turning Security Findings into Business Risk

Burp Suite Testing Notes: A Web App Security Workflow

Recon Workflow with Nmap, Shodan and Maltego for Pentests

API Pentesting Checklist: OWASP API Security Testing

Build Your Own Private VPN with WireGuard on a Budget VPS

When Code Becomes War: The Rise of Algorithmic Conflict

The Next Cyber Pandemic: When Open-Source AI Falls Into the Wrong Hands

How China Is Engineering a Global Hacker Army

How Supervised Machine Learning Can Stop Spear-Phishing

SOC and SIEM Career Guide: Skills, Labs and Certifications

Building a 24/7 Tier-1 SOC in Malaysia: Architecture & Handover

Penetration Testing Career Guide: Malaysia & Singapore

Why It's Time to Retire SMS OTPs for Stronger Authentication

Self-Hosting Lemmy: A Secure, Decentralized Reddit Alternative

Self-Hosting Threema: A Beginner-Friendly Guide

Securely Host Websites at Home on a Raspberry Pi 5 with aaPanel

A Beginner's Guide to Penetration Testing: Tools and Techniques

SIEM vs. SOAR: Which One Do You Need for Your Business?

Deploy a Secure Prosody XMPP Server on Docker

Pydio Cells on Raspberry Pi 5: Self-Hosted File Server Guide

How to Configure Any Router as a Wi-Fi Relay for Captive Portals

Holiday Cybersecurity Guide: How to Shop Safely Online

Why Cybercriminals Target New Domain Extensions

Raspberry Pi VPN: Reach Your Home Network From Anywhere

Vulnerability Management for Large Enterprise Networks

AI in Cybersecurity: Revolutionizing Threat Detection and Response

Pi-hole on Raspberry Pi for Home Network Security

Secure Samba Server on Linux: Hardening and Setup Guide

Cybersecurity Career Accelerator: Power Up Your Journey to Success

Introduction to Linux, the Open-Source Operating System

Gmail SMTP with Cloudflare Email Routing: A Security-First Guide

Social Engineering: The Art and Science of Human Hacking

WAF Buyer's Guide: How to Choose a Web Application Firewall

Reset a Linux Password from GRUB (and How to Prevent It)

Bug Bounty Programs: A Complete Guide to Crowdsourced Security

Linux File Permissions and Ownership Management

Top Linux Distributions Across 5 Categories

Top 10 Virtual Machine Software for Cybersecurity Labs

How to Secure Your SSH Server: The Definitive Hardening Guide

Artifact Locations & The Digital Forensics Artifacts Repository

Debian Lab Setup for Cyber-Security Enthusiasts

SQLmap Tutorial: Detect and Exploit SQL Injection Safely

macOS Forensics: A DFIR Guide to Artifacts and Hunting

Essential Tools for Privacy in Daily Life

Email Spoofing Explained: SMTP, PHP Demo, SPF, DKIM, DMARC

Warning