Cybersecurity Insights
& Security Research

Tools

Havoc C2: Sleep Obfuscation & Return Address Spoofing Guide

You have run Cobalt Strike for years, it works, but it is also the most signatured tool on the market, every defender knows how to spot it Havoc is differ...

• Eng. Donya Bino
• May 08, 2026

Read Article

Hacking

Slow Drip Prompt Injection: The 30-Turn Heist That Nobody Notices

A user starts a chat with your AI assistant, they ask a simple question, "What is the weather today"The assistant answers, everything is normalThe user ask...

• Eng. Donya Bino
• May 07, 2026

Read Article

Hacking

Mirai Botnet ADB DDoS Attack Recruits Android TV Boxes

Your Android TV box or smart TV could be part of a DDoS army right now. And you would never know.Security researchers at Hunt.io have uncovered a new Mirai...

• Eng. Donya Bino
• May 07, 2026

Read Article

Hacking

ZiChatBot Trojan: The Malware That Slides Into Your DMs and Your System

On Discord, a friend sent you a file named "ZiChatBot_setup.exe" with a note saying to try it out because it's a great new chatbot app. You trusted your f...

• Eng. Donya Bino
• May 07, 2026

Read Article

Exploits

Linux Kernel proc readdir Use After Free Leads to Root

A kernel bug that has lurked in Linux for over a decade can turn any local user into root. The flaw sits in how the proc filesystem handles directory entri...

• Eng. Donya Bino
• May 06, 2026

Read Article

Tools

Scan Docker Images for Vulnerabilities with Trivy: Step-by-Step

You built a Docker image, it runs perfectly, no errors, no warnings, you push it to your registryBut inside that image, there are vulnerabilities, old vers...

• Eng. Donya Bino
• May 06, 2026

Read Article

Awareness

30-Day PACS Downtime: Diagnose a Stroke Without Imaging System?

It is 2 AM , a patient arrives at the emergency department, slurred speech, Facial droop, one arm drifting, and classic stroke symptoms.The clock is tickin...

• Eng. Donya Bino
• May 06, 2026

Read Article

Exploits

Weaver E-cology Unauthenticated RCE Exploit Under Active Attack

A critical vulnerability in a popular enterprise office automation platform is being actively exploited. Attackers need no password. No username. No specia...

• Eng. Donya Bino
• May 05, 2026

Read Article