Post-Quantum Cryptography — What Security Teams Must Do Before It’s Too Late

Have you ever thought of what will happen to cryptography(your passwords, encryptions, rsa tokens, auth tokens etc.) when Quantum Computing comes into hands of state actors? My plain-English guide for security teams on what post-quantum cryptography means, what you need to do now, and the NIST standards that define the path forward. What You'll Learn Why quantum computers threaten current encryption What "harvest now, decrypt later" attacks are and why they're happening now The NIST post-quantum cryptography standards and what…

Read full article →

How to Extract a System Prompt Using Advanced Techniques in 2026 | Day 18

🤖 AI/LLM HACKING COURSE FREE Part of the AI/LLM Hacking Course — 90 Days Day 18 of 90 · 20% complete ⚠️ Authorised Targets Only: Advanced System prompt extraction must only be performed against applications you have explicit written authorisation to test. If extraction reveals credentials or sensitive architecture details, document them without accessing the connected services beyond what's necessary to confirm the finding exists. I've run the 15-technique extraction suite against hundreds of AI deployments at this point. The…

Read full article →

How to Use Burp Suite for LLM Security Testing | Day17

🤖 AI/LLM HACKING COURSE FREE Part of the AI/LLM Hacking Course — 90 Days Day 17 of 90 · 18.8% complete ⚠️ Authorised Targets Only: All Burp Suite interception and manipulation must only be performed against systems within your authorised scope. Routing your own API credentials through Burp to test your own application or authorised targets is fine. Never intercept traffic to AI services using credentials or accounts belonging to other parties. The first time I used Burp Suite to…

Read full article →

AI Security Posture Management – The Security Tool Every Organisation Needs

You can't secure what you can't see, and most organisations currently have zero visibility into their AI models, training data, and agent deployments. AI-SPM is the emerging category of security tools that provides exactly that visibility — monitoring AI workloads, models, and agents the same way Cloud Security Posture Management tools monitor cloud infrastructure configurations. What You'll Learn What AI-SPM is and how it differs from CSPM and traditional security tools What an AI-SPM tool monitors and the risks it…

Read full article →

How to Build an Automated Prompt Injection Testing Pipeline | Day 16

🤖 AI/LLM HACKING COURSE FREE Part of the AI/LLM Hacking Course — 90 Days Day 16 of 90 · 17.7% complete ⚠️ Authorised Targets Only: Automated prompt injection testing — including any volume-based scanning — must only be performed against systems you have explicit written authorisation to test. Automated tools cause more API calls and more measurable impact than manual testing. Agree volume and timing constraints with the engagement contact before running any automated scan against a production target. A…

Read full article →

Metasploitable vsftpd Backdoor Lab — CVE-2011-2523 Exploit Guide

🧪 METASPLOITABLE LAB SERIESFREE Part of the Metasploitable Lab Series Lab 5 of 30 · 16% complete ⚠️ Lab Environment Only. Metasploitable vsftpd Backdoor Lab - vsftpd 2.3.4 exploitation targets your local Metasploitable 2 VM only. Never test against systems you don't own. ✅ Before You Start Lab 4 — First Metasploit Module — running your first MSF exploit. This lab introduces the vsftpd backdoor — one of the most famous Metasploitable vulnerabilities and the classic first manually exploitable service.…

Read full article →

Linux Sudo Privilege Escalation Methods — 7 Techniques + GTFOBins Guide

I find a sudo misconfiguration on at least half of the Linux systems I assess. Not because organisations are careless — most have intentional sudo rules for legitimate operational reasons. The problem is that those rules were written by someone who understood the intended use case but didn't know about GTFOBins. Every sudo rule that lets a user run a binary capable of spawning a shell, reading arbitrary files, or writing to privileged paths is a potential privilege escalation path.…

Read full article →