DNSSEC Explained: Chain of Trust, NSEC3 and the October 2026 Root Rollover
How DNSSEC signs the DNS: RRSIG, DS chains anchored at the root, NSEC3 trade-offs, and the KSK rollover landing October 11, 2026.
BOLA and Broken Auth API Attacks with Burp Suite: Lab Guide
Hijack your own lab: find and exploit BOLA and broken-auth flaws in a vulnerable API using Burp Suite — then learn the authorization checks that actually fix them.
OWASP ZAP DAST Lab: Authenticated API Scanning Explained
Break your own API with OWASP ZAP: active scanning, authenticated scan contexts and API definitions in a step-by-step DAST lab you can rebuild for any target.
eBPF Explained: Verified Programs Inside the Kernel
How eBPF runs verified, JIT-compiled programs safely in the Linux kernel — and why networking and security tools bet their stacks on it.
SSRF to Cloud Metadata: The Attack Behind Capital One and How to Stop It
How SSRF turns one forged request into cloud-wide credential theft — the Capital One chain, IMDSv2, and the controls that actually block it.
Decode ACARS and VDL2 with acarsdec and dumpvdls2: SDR Lab
Decode live aircraft ACARS and VDL2 datalink traffic with about $30 of SDR hardware, acarsdec, dumpvdls2 and Wireshark — a complete hands-on radio lab.
Weekly Threat Intel: Agentic AI Abuse and Edge CVEs
Agentic-AI abuse, the fall 2026 Edge CVE wave and infostealer tradecraft — this week’s defensive priorities in one briefing.
Certificate Transparency: How Merkle Logs Ended Blind Trust in CAs
How Certificate Transparency Merkle logs, SCTs and monitors make every TLS certificate publicly auditable — and how they caught Symantec in 2015.
Weekly Threat Intel: Agentic AI, Stealer Logs, Edge CVEs
Stealer-log markets, edge-device exploitation and agentic-AI abuse: what defenders must patch, monitor and drill this week.
Detection Engineering with Sigma: Detections That Survive Vendor Churn
How Sigma turns SIEM detections into portable YAML, how pySigma pipelines compile them to any backend, and how to test rules like code with Atomic Red Team.
Fuzzing Web APIs with ffuf and Caido: Recon-to-Exploit Guide
A hands-on recon-to-exploit walkthrough: fuzz hidden endpoints and parameters with ffuf and Caido, chain the findings, and document the impact.
Build an MCP Security Lab: Intercept and Audit Model Context Protocol
Build a local MCP security lab: intercept, audit and attack Model Context Protocol servers with proxies, rogue tools and logging you fully control.