Learn how the SSHole vulnerability exploits an interaction between OpenSSH and musl libc to bypass SSH password authentication, its root cause, affected versions, and mitigation strategies.
Category: featured
highlighted posts that shows on homepage
Full Account Takeover On Keycloak 26 – Why Latest Version Does Not Always Mean Safest Version
Keycloak 26 has a vulnerability that allows hackers to takeover users accounts fully by exploiting the reset password flow. Learn what opened this vulnerability and how to defend against it.
PHP2Shell: What Is It and How Did It Put 75% Internet At Risk ?
Explore PHP2Shell, an AI-assisted discovery of Zend Engine memory bugs, Use-After-Free vulnerabilities, heap grooming, and how attackers chain them into Remote Code Execution (RCE).
Build a Private RAG System with Local Llama
Learn how to build a private RAG (Retrieval-Augmented Generation) system using a locally deployed Llama model. This step-by-step guide covers document processing, embeddings, vector databases, semantic search, and prompt construction to help an AI assistant answer questions using sensitive internal documents without sending data to external AI services.
History Of Artificial Intelligence
Explore the history of artificial intelligence, from Hobbes and Boolean logic to neural networks, Transformers, GPT, and ChatGPT.
Man-In-The-Middle Attack: What is it & How did it happen in the past ?
How does a man-in-the-middle attack work? Rogue Wi-Fi access points, ARP spoofing, DHCP poisoning and DNS spoofing explained, plus how to detect them.
Supply-Chain Attack: Open-Source Contributors Are Also Targeted By Hackers
How Hackers Target Developers in Supply Chain Attacks
You can be extorted just by opening an attachment
How does ransomware get in and encrypt everything? Learn how an email attachment starts an extortion attack, and the backup and defense steps that stop it.
You Can Be Hacked Just By Watching An .AVI Video!
A heap overflow in the FFmpeg MagicYUV decoder lets a crafted AVI file run code when you play it in VLC. See how the exploit works and how to protect yourself.
“Attention is all you need” – Paper Explained
The paper behind ChatGPT and Gemini, explained step by step: self-attention, queries, keys and values, and how the Transformer architecture actually works.