Cybersecurity Insights
& Security Research

Hacking

MuddyWater's Operation Olalampo Targets MENA with New Malware

A new operation called Operation Olalampo has been launched by the Iranian APT group MuddyWater (aka Earth Vetala, Mango Sandstorm, and MUDDYCOAST) that ta...

• Eng. Donya Bino
• Feb 23, 2026

Read Article

Hacking

Poisoning Public Repos with Fake Credentials

Poisoning public repositories with fake (but very attractive-looking) credentials is one of the fastest-growing reconnaissance and initial-access technique...

• Eng. Donya Bino
• Feb 23, 2026

Read Article

Awareness

Honeypots & Deception for Early Detection

One of the best ways to identify early-stage intruders (i.e., stalking while still being able to gain access to valuable information) is through the use of...

• Eng. Donya Bino
• Feb 23, 2026

Read Article

Awareness

Credential Stuffing vs Spraying vs Hybrid

All three techniques are still responsible for a huge portion of account takeovers in 2026, but the balance has shifted noticeably over the last two years....

• Eng. Donya Bino
• Feb 22, 2026

Read Article

Hacking

MySQL Dump → Credential Harvest in Minutes

Getting a MySQL dump file (.sql) during a pentest, red-team exercise, or incident response is usually one of the highest-value moments of the job. Even a 1...

• Eng. Donya Bino
• Feb 22, 2026

Read Article

Hacking

Exposed DB Banners: MySQL, PostgreSQL, MSSQL, MongoDB

When a database server is accidentally exposed to the internet (port open without firewall, NAT misconfiguration, cloud security group too permissive), the...

• Eng. Donya Bino
• Feb 22, 2026

Read Article