Vulnerability research & exploit notes.
Long-form articles on web, kernel, cloud, and identity-layer security. Written for engineers — light on hype, heavy on primitives.
MikroTrick: MikroTik RouterOS SSH Takeovers in the Wild
CERT Polska confirmed active MikroTrick exploitation against internet-facing RouterOS SSH. Patch versions, IoCs, Flagged checks, and IR steps.
Security+ Exam Day Strategy and Performance-Based Questions
How to manage the 90-minute SY0-701 clock, approach PBQs, eliminate distractors, and avoid common self-sabotage on CompTIA Security+.
Security+ Acronyms That Matter (and How to Learn Them Fast)
A high-yield way to study SY0-701 acronyms by theme—identity, crypto, network, ops, and GRC—instead of grinding 300+ terms alphabetically.
Governance, Risk, and Compliance: Domain 5 Without Bureaucracy Fog
Policies, risk analysis, third-party risk, audits, and security awareness—Security+ Domain 5 topics explained for practical exam scenarios.
Incident Response and Vulnerability Management for Security+
IR lifecycle, forensics hygiene, threat hunting basics, and a practical vulnerability management loop aligned with SY0-701 Domain 4.
Security Operations: IAM, Monitoring, and Hardening at Scale
Domain 4 for SY0-701 in plain language—identity lifecycle, phishing-resistant MFA, SIEM that actually detects something, and why hardening without inventory is theater.
Data Protection and Resilience: Backups, Continuity, and Classification
How SY0-701 expects you to protect data at rest/in transit/in use, classify information, and keep operations alive with backup and continuity strategies.
Zero Trust, Cloud, and Secure Enterprise Architecture
Domain 3 for SY0-701 in plain language—NIST SP 800-207 Zero Trust, cloud shared responsibility, microsegmentation, and why every trust boundary you skip becomes the adversary's shortcut.
Vulnerabilities, IoCs, and Mitigations: Domain 2 as a Decision Tree
How to connect vulnerability class, attacker behavior, and mitigation on SY0-701—web flaws in human prose, DoS subtypes, wireless threats, IoC signals, and exam traps consolidated in one place.
Threat Actors, Attack Vectors, and Social Engineering on SY0-701
Map nation-states, insiders, shadow IT, and modern social engineering (BEC, smishing, deepfake-adjacent pretexting) to Security+ threat models.
Cryptography and PKI for Security+: What You Must Actually Reason About
Symmetric vs asymmetric crypto, hashing vs encryption, certificates, TPM/HSM, and the PKI lifecycle topics that SY0-701 loves to test.
Security Controls, CIA, and AAA: The Grammar of Security+
Control categories versus types, CIA and non-repudiation, AAA, separation of duties, defense-in-depth—Domain 1 vocabulary explained the way a practitioner uses it, not as a glossary.
CompTIA Security+ SY0-701: A Practical Study Roadmap
How to structure Security+ SY0-701 prep around the five domains, PBQs, and high-yield habits—without drowning in acronyms.
Abusing OAuth 2.0 PKCE Downgrade in Native Clients
A subtle authorization-code injection path emerging when public clients silently fall back from S256 to plain PKCE.
A Netlink Race Condition Leading to Kernel UAF
Walkthrough of a 1-day Linux kernel UAF reachable from an unprivileged user namespace, with a deterministic exploit primitive.