Shodan and Censys for Attack Surface Recon: A Hands-On OSINT Lab with Ethics Guardrails
Learn attack surface reconnaissance with Shodan, Censys, and crt.sh in this hands-on OSINT tutorial for blue-teamers and CTF players, with clear ethical…
Weekly Threat Intel: 27 September 2026 — Agentic Supply Chain Abuse and CVE Trades
This week's threat intel digest: ransomware loader shifts, actively exploited CVEs, and how adversaries abuse AI agent tooling in software supply chains. Verified facts, hands-on detection guidance for blue teams.
Abusing GraphQL Introspection and Batching: A Hands-On API Attack Lab with Defenses
Build a safe GraphQL attack lab: chain introspection, query depth abuse, and field-level auth bypass, then defend with persisted queries and cost limits. Step-by-step tutorial for security learners and blue teams.
SSRF Lab: Exploit and Block Server-Side Request Forgery with Real Targets and Defenses
Hands-on SSRF lab: exploit a vulnerable URL-fetch parameter, pivot to cloud metadata endpoints, then enforce allowlist defenses. Verified commands and configs for blue teams and CTF players.
Weekly Threat Intel: 26 September 2026 — Ransomware Crews Adopt Agent Tooling
This week's threat intel: exploited CVEs, ransomware affiliates adopting AI agent tooling, stealer-to-ransomware handoff tradecraft, and hands-on blue-team detection guidance for 22 September 2026.
Weekly Threat Intel: OAuth App Abuse, Autumn 2026 CVE Exploitation, and Malware Loader Trends
This week's threat intel roundup: OAuth third-party app abuse, actively exploited Autumn 2026 CVEs, and malware loader trends — with defender actions mapped to each tradecraft pattern.
Abusing OIDC in CI/CD: A Step-by-Step Tutorial on GitHub Actions Token Trust Chains
Hands-on tutorial: configure GitHub Actions OIDC federation to cloud IAM, then walk through real misconfigurations that let attackers mint cloud…
Hands-On Container Escape Lab: Privilege Escalation from Pod to Node with Real Commands
Build a safe, vulnerable minikube lab and practice real container escape techniques step by step: privileged pods, hostPath mounts, service account abuse, and node privilege escalation — with verified commands and blue-team detection tips.
Weekly Threat Intel: Supply Chain Compromises, Autumn CVE Exploitation and Infostealer Trends
Supply-chain compromise of a maintained npm package, active exploitation of autumn KEV CVEs, and infostealer delivery trends — the week’s threat picture and what defenders should do about each.
Weekly Threat Intel: Edge CVEs, MCP Agent Abuse, Stealer Cashouts
Edge CVEs under active exploitation, AI-agent abuse patterns, and infostealer cash-out trails — the week’s threat picture and what defenders should do about each.
Dependency Confusion Lab: Reproduce and Defend Your Pipeline
Build a CTF-style lab that reproduces dependency confusion and namespace squatting — then lock them down with scoped registries, lockfile pinning and reproducible builds.
Cosign Signing and Verification Lab: Sign, Verify, Enforce
Sign and verify artifacts step-by-step with Sigstore Cosign: keyless signing, transparency log entries, and admission-time verification in a hands-on lab.