Another week, another SSLVPN RCE - this time, it's CVE-2024-3400 in Palo Alto's GlobalProtect. But, we've seen no public analysis 🙁 so, allow us.. labs.watchtowr.com/palo-alto-putt…

Know when to give up, sometimes it's futile to keep trying.

السلام عليكم، مقاله سريعه عن HTML Smuggling blog.0x4.xyz/bypassing-wind…

السلام عليكم ورحمة الله وبركاته، كل عآم وأنتم بألف خير بعد الزحمة. جايييييينكمم بإذن الله⌛️👀👇🏻👇🏻 Cyberna | سايبرنا

The award-winning Qualys Threat Research Unit (TRU) has discovered a critical vulnerability in OpenSSH, designated CVE-2024-6387 and aptly named "regreSSHion." This Remote Code Execution bug grants full root access, posing a significant exploitation risk. blog.qualys.com/vulnerabilitie…

I have passed the Certified Red Team Lead (CRTL) exam from Zero-Point Security! api.eu.badgr.io/public/asserti…

We all exit one way or the other.

Thrilled to announce that I’ve obtained #OSCE3 after earning #OSEE! The final step, #OSEP, marked the end of an incredible journey. 🎉 Big thanks to OffSec for these outstanding certifications. Keep pushing your limits—it’s worth it!

Two more CVEs: - CVE-2024-55468 - CVE-2024-55469

Do Secure-By-Design pledges come with stickers? Join watchTowr Labs again, for a walkthrough of Ivanti's CVE-2025-0282 - the pre-auth RCE in their Connect Secure appliance. The timer has begun on our Detection Artefact Generator..... labs.watchtowr.com/do-secure-by-d…

Stay vigilant; it’s easier to prevent than to recover from a setback.

Though your choices may shape your path, they cannot alter the course of your destiny.