What Vibe-Coding Is Doing to Your Attack Surface
Vulnerabilities in AI-Generated Apps. What can you do about it ?
Read article
CYPFER Offensive Practice
Offensive security insights, built to prevent attacks and improve detection.
Practical writeups on red teaming, exploitation, and attack simulation.
Latest posts
Cobalt Strike redirectors using AWS and Azure
One of the challenges for red team operators is to maintain their command & control (c2) infrastructure. An aspect that can be time consuming is obtaining reputable domain names to be used by c2 server.
Read article
Is Microsoft Entra ID really phishing-resistant?
The announcement everyone's applauding. It fixes one thing and it isn't the thing that gets tenants owned.
Read article
EDR Can't Be Everywhere: Why Defense in Depth Matters
Why EDR alone fails: Organizations need defense-in-depth strategies not just EDR.
Read article
Ransomware Threat Modeling Through an Offensive Security Lens
Learn how ransomware threat modeling connects real attack paths, business impact, and offensive security testing.
Read article
Adapting penetration testing methodology for AI driven solutions
How much of the traditional pentesting playbook still applies when the target is a language model
Read article