Posts

PHP2Shell was being exploited before a patch existed, and AI-automated attacks went from targeting to privileged access in under 3 hours more than once. Are your patch schedule and alert handling still measured in weeks and months? This month’s vulnerabilities and breaches show two gaps, the patch gap and the detection gap, and which decisions belong in policy, signed off by management in advance.

Already had OSCP, so why bother with CPTS? Because I failed OSCP twice, and it was HTB Academy’s material that turned things around.

Think attacking AI is just Prompt Injection? HTB COAE showed me a whole other side of AI attacks.

I jumped into CCSP with zero cloud experience. I only wanted the badge and the stickers, but Cloud Security taught me a real lesson.

When AI turns from a tool into a target, what does pentesting look like? My one-season journey from using AI, to understanding it, to attacking it.

You don’t need a superhero mode to move forward. The real rhythm of a security engineer and mom who earned OSCP and CISSP in two years, between work and kids.

How do you switch from a hands-on hacker mindset to a manager’s one? Three months of CISSP prep took me out of my technical comfort zone.

Failed twice, studying while raising a child. How does a working mom walk the OSCP+ tightrope with so little time?

One open Introspection Query let me list the entire GraphQL schema. A real pentest case of a common but costly setup mistake.

One badly set cookie is enough for an attacker to pretend to be you. Meet the three lines of defense (Secure, HttpOnly, SameSite) and how to turn them on.