Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
328 articles
A tutorial demonstrates XOR-obfuscating strings, recovering them with FLOSS, and inspecting runtime behavior with Malcat and FakeNet. It explains how obfuscation hinders static analysis and why visible imports can still reveal behavior.
The hosts discuss an AI agent’s reported reputation attack after a rejected code contribution, Unicode and emoji techniques for concealing malicious code, and Heretic, an open-source tool said to remove safety refusals from transformer-based LLMs.
Pavel Yosifovich and Josh Stroschein discuss Windows EDR architecture, direct-syscall blind spots, ETW threat-intelligence events and the trade-offs between endpoint visibility, performance and stability.
A reverse-engineering lesson explains how strings and imports reveal a Windows program’s behavior, how compiled binaries reference stored strings through pointers, and how analysis tools support disassembly and triage.
The lesson demonstrates using Floss and dump bin to inspect wide-character strings and import tables, and explains how compiler/runtime behavior and sparse imports can complicate malware triage.
A sponsored review presents TryHackMe’s SEC1 (Cybersecurity 101) as an entry-level, hands-on certification covering offensive and defensive fundamentals. It describes seven practical exam sections, up to 24 hours to finish, and a stated $149 standard price for non-premi
The hosts discuss malware delivered through fake developer job offers, prompt injection targeting OpenClaw, a record DDoS attributed to the Isuru botnet, and a Notepad++ update supply-chain compromise.
A tutorial demonstrates disabling Windows Data Execution Prevention (DEP) through a boot configuration setting, the Windows settings interface, or a binary’s NX compatibility flag. The presenter notes the boot setting requires a reboot and the binary flag may not always
A hands-on lesson uses a toy downloader to explain ASCII and UTF-16 strings, imports, and basic PE analysis, with FLOSS for string recovery and FakeNet to simulate download-and-execute behavior.
A cybersecurity engineer outlines a 2026 career approach centered on learning systems in operational context, systems thinking, using AI with human oversight, and connecting security work to business risk and costs.
Phrack editors recount how a rival group allegedly inserted destructive commands into copied articles, discuss the magazine’s role in exploit education, and describe its community-led revival and 2025 anniversary issue.
A tutorial demonstrates just-in-time access requests and approvals for AWS Systems Manager-managed servers, along with session logging and RDP recording. It also covers approval policies and permissions that prevent bypassing the access process.
A malware-analysis lesson explains how strings and imported functions reveal a program’s behavior, using an illustrative C downloader to show how it retrieves and executes a file.
The hosts discuss CISA’s directive to patch actively exploited CVE-2024-37079 in VMware vCenter Server, claimed Nike data theft, a longstanding Telnet authentication bypass, and Shiny Hunters’ voice-phishing claims tied to data leaks.
A video walkthrough demonstrates AWS Security Agent in public preview, showing automated penetration testing, vulnerability verification, code review, and design review, with findings and reproducible test steps.
Darknet Diaries traces Masters of Deception's telecom intrusions, its feud with Legion of Doom, and the federal investigations that followed, alongside early EFF challenges to computer-crime prosecutions.
The hosts discuss cyber insurer recommendations for 2026, including replacing end-of-life systems, using stronger authentication, adopting zero trust, actively managing detection tools, and maintaining immutable backups.
Darknet Diaries recounts how Legion of Doom and other early hackers accessed telephone systems, shared technical documents and drew federal scrutiny. It also examines phone fraud, the E911 file controversy and suspicions surrounding AT&T’s 1990 outage.
The video argues cybersecurity engineers need skills spanning programming, data engineering and analysis, incident management, cloud, DevOps and DevSecOps, with practical engineering ability to automate security work.
A cybersecurity engineer recommends exploring security specialties, building hands-on projects and developing business communication skills to prepare for a competitive job market.
The video demonstrates Kali Linux workflows for network discovery, SMB/FTP access, password guessing and cracking, phishing-style credential capture, web scanning, OSINT, remote shells, and SQL injection testing. The presenter says exercises use systems he owns.
The video walks through OSINT searches using Google operators, username and reverse-image lookup, and resources such as Migrat and the Google Hacking Database. It also demonstrates finding exposed passwords and hash matches, highlighting account-takeover risks.
Cybersecurity engineers evaluate career advice on hiring, penetration testing, entry-level roles and GRC, emphasizing practical skills, foundational knowledge and the technical work involved in verifying remediation.
A TryHackMe Advent of Cyber walkthrough demonstrates using curl to send HTTP requests, manage session cookies, test weak passwords and bypass a user-agent check in a practice environment.
