Posts on cybersecurity
43 posts on cybersecurity. Notes from public sources and my own test lab.
Midnight Signal: SonicWall and the Broken Perimeters
A 3:14 AM alert, cold coffee, and a flashing dashboard. PulseCom's VPN gateway is acting up. Let's talk about the SonicWall SMA 100 series zero-day.
Seeing Behind the Mask: A Late-Night Shift in the Analysis Lab
Signature-based detection is no longer enough. Let's dive into the 'kitchen' of malware analysis to see how we unmask modern, fileless threats using static and dynamic techniques.
Don't Underestimate __proto__: You Might Lose the Whole Kingdom
How a 'sneaky' JSON key turned a 3 AM incident response into a deep dive into Prototype Pollution and its path to Remote Code Execution.
The Silent Cry of PLCs: The Cost of Living on 'Default' in Industrial Systems
A deep dive into the world of OT security, legacy protocols like Modbus, and why the 'air-gap' myth is the biggest threat to industrial infrastructure.
Drowning in the Sandbox: The 'Automated Analysis' Myth vs. Reality in Malware Analysis
If you're blindly trusting VirusTotal or automated sandboxes for critical systems, you're not just being lazy—you're potentially tipping off the attackers. Let's dive into why we need to get our hands dirty with manual analysis and proper OPSEC.
The Ticking Bomb You Can’t Hear: A Survival Guide for Zero-Day Chaos
In the world of cybersecurity, some threats are invisible until they strike. Let's talk about the 'dark matter' of our industry: Zero-Day vulnerabilities, and how to survive when the clock hits zero.
Smart Homes, Stupid Mistakes: Leaving the Backdoor Open in the IoT World
Think a tiny smart plug is harmless? From 'admin:admin' nightmares to unencrypted MQTT traffic, let's explore why IoT is the 'Wild West' of cybersecurity and how we can secure these chatty devices.
The Labyrinth Inside the Code: Pulling an All-Nighter for Binary Analysis
It's 3 AM, your screen is glowing blue, and a suspicious notepad.exe is trying to exfiltrate data. Let's dive into the anatomy of a fileless malware attack and see how we can harden our defenses.
The Beast Inside the Box: From Static Analysis to Behavioral Hunting
Checking hashes isn't enough anymore. Sedat dives into the 'kitchen' of malware analysis, explaining why we need to move beyond signatures to understand the character of modern threats.
It’s Not Just the Code Sweating on the Analysis Table: First Steps into the Malware World
Malware analysis is like an autopsy on a patient that is still very much alive and trying to kill you. Here is how we start tearing into the black box.
The Door Nobody Knows About Yet: Zero-Day Realities and the 'Patch' Race
A deep dive into the world of Zero-Day vulnerabilities, from early-career mistakes causing 4 AM kernel panics to the technical dance of memory management and the race against time.
A Tale of 'Update.exe': Dissecting Malware in a Lab Environment
Ever wondered if that suspicious binary on your desk is just logging or exfiltrating your entire database? Let's dive into the 'kitchen' work of security and learn how to safely analyze malware.