https://blog.intelligencex.org/rss/author/sbow IntelligenceX Cybersecurity Blog - Latest Cyber News, AI & Security Updates - sbow en © 2026 IntelligenceX Blog. All rights reserved. https://blog.intelligencex.org/owasp-a07-2025-authentication-failures-comprehensive-guide https://blog.intelligencex.org/owasp-a07-2025-authentication-failures-comprehensive-guide Thu, 29 Jan 2026 16:15:00 +0530 sbow OWASP Top 10 2025, authentication failures, credential stuffing, password security, multi-factor authentication, MFA, passkeys, FIDO2, passwordless authentication, session management, brute force attacks, identity theft, phishing-resistant authentication, biometric authentication, adaptive MFA, password spray attacks, session hijacking, authentication best practices, hybrid credential stuffing https://blog.intelligencex.org/owasp-a06-2025-insecure-design-complete-guide https://blog.intelligencex.org/owasp-a06-2025-insecure-design-complete-guide Wed, 28 Jan 2026 16:02:11 +0530 sbow OWASP Top 10 2025, insecure design, secure by design, threat modeling, business logic vulnerabilities, STRIDE methodology, PASTA threat modeling, secure design patterns, architectural security flaws, design phase security, abuse cases, business logic abuse, application architecture security, threat modeling tools, secure SDLC, defense in depth, OWASP business logic top 10, secure development lifecycle, design-level vulnerabilities https://blog.intelligencex.org/owasp-a05-2025-injection-vulnerability-guide https://blog.intelligencex.org/owasp-a05-2025-injection-vulnerability-guide Thu, 22 Jan 2026 16:14:35 +0530 sbow OWASP, Injection, SQL Injection, XSS, Command Injection, Application Security, Web Security, Secure Coding, Vulnerability Management, Penetration Testing, Security Testing, Input Validation https://blog.intelligencex.org/owasp-a04-2025-cryptographic-failures-guide https://blog.intelligencex.org/owasp-a04-2025-cryptographic-failures-guide Wed, 21 Jan 2026 18:17:11 +0530 sbow OWASP Top 10 2025, cryptographic failures, data encryption, application security, sensitive data exposure, SSL/TLS, encryption best practices, data protection, security vulnerabilities, cryptography, AES encryption, secure coding, cybersecurity, HTTPS, data security, PKI, key management, secure communications https://blog.intelligencex.org/software-supply-chain-failures-owasp-a03-2025-complete-guide https://blog.intelligencex.org/software-supply-chain-failures-owasp-a03-2025-complete-guide Tue, 20 Jan 2026 15:20:05 +0530 sbow software supply chain failures, OWASP A03, SolarWinds breach, Log4j vulnerability, vulnerable dependencies, malicious packages, SBOM, dependency scanning, npm security, supply chain security, vendor compromise https://blog.intelligencex.org/security-misconfiguration-owasp-a02-2025-complete-guide https://blog.intelligencex.org/security-misconfiguration-owasp-a02-2025-complete-guide Sat, 17 Jan 2026 02:03:36 +0530 sbow security misconfiguration, OWASP A02, default credentials, cloud misconfiguration, open bucket, security headers, configuration hardening, default accounts, vulnerable configurations, infrastructure security https://blog.intelligencex.org/broken-access-control-owasp-a01-2025-complete-guide https://blog.intelligencex.org/broken-access-control-owasp-a01-2025-complete-guide Fri, 16 Jan 2026 03:42:18 +0530 sbow broken access control, OWASP A01, IDOR, privilege escalation, authorization bypass, access control vulnerabilities, parameter tampering, URL manipulation, vertical escalation, horizontal escalation https://blog.intelligencex.org/2fa-bypass-techniques-security-implications-2025 https://blog.intelligencex.org/2fa-bypass-techniques-security-implications-2025 Thu, 15 Jan 2026 03:59:20 +0530 sbow 2FA bypass, two-factor authentication, MFA vulnerabilities, SMS OTP, authenticator app, phishing, SIM swap, push notification, brute force, security implications https://blog.intelligencex.org/shadow-ai-enterprise-risk-governance-2025 https://blog.intelligencex.org/shadow-ai-enterprise-risk-governance-2025 Tue, 13 Jan 2026 03:39:03 +0530 sbow shadow AI, unauthorized AI tools, enterprise security, AI governance, data leakage, compliance risks, ChatGPT risks, unauthorized AI adoption, enterprise risk management, AI policy https://blog.intelligencex.org/owasp-top-10-2025-vulnerabilities-complete-beginner-guide https://blog.intelligencex.org/owasp-top-10-2025-vulnerabilities-complete-beginner-guide Sat, 10 Jan 2026 04:49:38 +0530 sbow OWASP Top 10 2025, web application vulnerabilities, security vulnerabilities explained, access control, SQL injection, authentication, cryptography, beginners guide, web security, application security https://blog.intelligencex.org/jwt-vulnerabilities-testing-guide-2025-algorithm-confusion https://blog.intelligencex.org/jwt-vulnerabilities-testing-guide-2025-algorithm-confusion Fri, 09 Jan 2026 03:56:42 +0530 sbow JWT vulnerabilities, algorithm confusion, RS256 to HS256, JWT testing, token forgery, signature bypass, none algorithm, key injection, jku parameter, kid parameter, BOLA, BFLA, JWT security testing, penetration testing https://blog.intelligencex.org/google-dorking-bug-bounty-penetration-testing-osint-guide https://blog.intelligencex.org/google-dorking-bug-bounty-penetration-testing-osint-guide Thu, 08 Jan 2026 02:33:19 +0530 sbow Google dorking, Google hacking, OSINT, bug bounty reconnaissance, search operators, inurl, filetype, intitle, site operator, subdomain enumeration, exposed credentials, security testing, penetration testing dorks https://blog.intelligencex.org/supply-chain-attacks-solarwinds-kaseya-cybersecurity-threat https://blog.intelligencex.org/supply-chain-attacks-solarwinds-kaseya-cybersecurity-threat Wed, 07 Jan 2026 03:49:06 +0530 sbow supply chain attacks, SolarWinds breach, Kaseya ransomware, malicious code injection, vendor security, third-party risk management, software supply chain, SBOM, zero-trust architecture, cybersecurity threats https://blog.intelligencex.org/local-file-inclusion-lfi-vulnerabilities-complete-guide https://blog.intelligencex.org/local-file-inclusion-lfi-vulnerabilities-complete-guide Tue, 06 Jan 2026 04:07:08 +0530 sbow local file inclusion, LFI vulnerability, directory traversal, path traversal, PHP wrappers, file inclusion bypass, web application security, penetration testing, OWASP top 10, vulnerability testing, security assessment https://blog.intelligencex.org/android-application-penetration-testing-complete-guide-2025 https://blog.intelligencex.org/android-application-penetration-testing-complete-guide-2025 Tue, 30 Dec 2025 23:39:40 +0530 sbow Android penetration testing, Android security testing, SSL pinning bypass, root detection bypass, mobile app security, Frida, JADX, Burp Suite, insecure data storage, OWASP MASTG, MITRE ATT&CK, Android vulnerability testing, mobile security assessment https://blog.intelligencex.org/cve-2025-14847-mongobleed-mongodb-memory-leak-vulnerability https://blog.intelligencex.org/cve-2025-14847-mongobleed-mongodb-memory-leak-vulnerability Mon, 29 Dec 2025 23:03:34 +0530 sbow CVE-2025-14847, MongoBleed, MongoDB vulnerability, zlib vulnerability, memory leak, unauthenticated disclosure, heap memory leak, MongoDB security, database vulnerability, CVSS 8.7, information disclosure https://blog.intelligencex.org/nosql-injection-vulnerabilities-complete-guide https://blog.intelligencex.org/nosql-injection-vulnerabilities-complete-guide Fri, 26 Dec 2025 23:37:38 +0530 sbow NoSQL injection, MongoDB injection, NoSQL security testing, database security, injection vulnerabilities, authentication bypass, NoSQL operators, query injection, web application security, database exploitation, MongoDB security https://blog.intelligencex.org/web3-smart-contract-auditing-complete-guide-2025 https://blog.intelligencex.org/web3-smart-contract-auditing-complete-guide-2025 Thu, 25 Dec 2025 00:47:58 +0530 sbow smart contract auditing, Web3 security, Solidity vulnerabilities, OWASP top 10, DAO hack, Poly Network, blockchain security, DeFi security, code audit, reentrancy attacks, smart contract vulnerabilities https://blog.intelligencex.org/cve-2025-68613-n8n-critical-rce-vulnerability https://blog.intelligencex.org/cve-2025-68613-n8n-critical-rce-vulnerability Wed, 24 Dec 2025 03:28:39 +0530 sbow CVE-2025-68613, n8n vulnerability, remote code execution, RCE, workflow automation security, expression injection, CVSS 9.9, security vulnerability, patch management, n8n security https://blog.intelligencex.org/agentic-ai-red-teaming https://blog.intelligencex.org/agentic-ai-red-teaming Tue, 23 Dec 2025 03:03:43 +0530 sbow agentic AI, red teaming, AI agents, autonomous AI, AI safety, adversarial testing, goal misalignment, AI vulnerabilities, agent security, AI risk assessment, tool use in AI, decision-making AI https://blog.intelligencex.org/blockchain-fundamentals-complete-guide-2025 https://blog.intelligencex.org/blockchain-fundamentals-complete-guide-2025 Sat, 20 Dec 2025 04:32:14 +0530 sbow blockchain fundamentals, blockchain basics, blockchain history, Bitcoin, Ethereum, smart contracts, EVM, Ethereum Virtual Machine, Chainlink, oracle problem, multi-chain, distributed ledger, consensus mechanisms, decentralization, blockchain use cases https://blog.intelligencex.org/credential-spraying-campaign-cisco-palo-alto-vpn-gateways-december-2025 https://blog.intelligencex.org/credential-spraying-campaign-cisco-palo-alto-vpn-gateways-december-2025 Fri, 19 Dec 2025 03:58:08 +0530 sbow credential spraying, Palo Alto GlobalProtect attack, Cisco SSL VPN, password spraying, 3xK GmbH, VPN gateway attacks, automated login attempts, credential stuffing, enterprise VPN security, December 2025 attack https://blog.intelligencex.org/react-cve-2025-55184-67779-55183-dos-source-code-exposure https://blog.intelligencex.org/react-cve-2025-55184-67779-55183-dos-source-code-exposure Thu, 18 Dec 2025 02:24:41 +0530 sbow CVE-2025-55184, CVE-2025-67779, CVE-2025-55183, React denial of service, React source code exposure, React Server Components, incomplete patch, Next.js vulnerability, React 19 security, RSC vulnerabilities https://blog.intelligencex.org/zero-day-hunting-advanced-recon-techniques-2025 https://blog.intelligencex.org/zero-day-hunting-advanced-recon-techniques-2025 Fri, 12 Dec 2025 04:26:31 +0530 sbow zero-day hunting, advanced recon techniques, bug bounty recon, JavaScript endpoint discovery, ASN enumeration, cloud bucket hunting, GitHub secrets, behavioral detection, OSINT techniques, vulnerability discovery https://blog.intelligencex.org/north-korea-etherrat-react2shell-exploit https://blog.intelligencex.org/north-korea-etherrat-react2shell-exploit Thu, 11 Dec 2025 02:39:37 +0530 sbow EtherRAT, React2Shell, CVE-2025-55182, North Korea-linked threat actors, DPRK malware, Ethereum C2, EtherHiding, Contagious Interview campaign, malicious npm packages, Web3 developer targeting, React Server Components RCE, Next.js vulnerability https://blog.intelligencex.org/ransomware-payments-pass-4-5-billion-fincen-analysis https://blog.intelligencex.org/ransomware-payments-pass-4-5-billion-fincen-analysis Wed, 10 Dec 2025 02:37:12 +0530 sbow ransomware payments, FinCEN ransomware report, $4.5 billion ransomware, Akira ransomware, ALPHV BlackCat ransomware, 2023 ransomware statistics, ransomware in financial services, ransomware in manufacturing, ransomware in healthcare, median ransom amount, Bitcoin ransomware payments https://blog.intelligencex.org/cve-2025-66516-apache-tika-xxe-vulnerability-pdf-rce https://blog.intelligencex.org/cve-2025-66516-apache-tika-xxe-vulnerability-pdf-rce Tue, 09 Dec 2025 01:18:41 +0530 sbow CVE-2025-66516, Apache Tika XXE, XML External Entity, CVSS 10.0, Tika vulnerability, PDF exploit, XFA attack, Apache Tika security, file disclosure, SSRF vulnerability, tika-core exploit https://blog.intelligencex.org/cve-2025-55182-react2shell-rce-exploit-poc https://blog.intelligencex.org/cve-2025-55182-react2shell-rce-exploit-poc Sat, 06 Dec 2025 01:02:26 +0530 sbow CVE-2025-55182, React2Shell, React RCE vulnerability, Next.js CVE-2025-66478, React Server Components exploit, CVSS 10.0, unauthenticated RCE, React vulnerability POC, unsafe deserialization, Flight protocol exploit https://blog.intelligencex.org/december-2025-cyber-threat-report-ddos-react-ransomhouse https://blog.intelligencex.org/december-2025-cyber-threat-report-ddos-react-ransomhouse Fri, 05 Dec 2025 03:16:38 +0530 sbow 29.7 Tbps DDoS attack, Aisuru botnet, React CVE-2025-55182, React2Shell vulnerability, Next.js CVE-2025-66478, RansomHouse ransomware, CVSS 10.0, remote code execution, DDoS record 2025, React Server Components https://blog.intelligencex.org/ai-powered-penetration-testing-ethical-hacking-automation https://blog.intelligencex.org/ai-powered-penetration-testing-ethical-hacking-automation Thu, 04 Dec 2025 04:33:00 +0530 sbow AI penetration testing, automated pentesting, AI hacking tools, machine learning security, autonomous vulnerability discovery, AI exploit generation, ethical hacking AI, automated red teaming, AI security testing, offensive AI https://blog.intelligencex.org/akira-ransomware-sonicwall-vulnerability-cve-2024-40766-campaign https://blog.intelligencex.org/akira-ransomware-sonicwall-vulnerability-cve-2024-40766-campaign Wed, 03 Dec 2025 04:36:06 +0530 sbow Akira ransomware, SonicWall CVE-2024-40766, SSL VPN attack, ransomware 2025, SonicWall vulnerability, rapid ransomware deployment, MFA bypass, SonicOS security, Akira campaign, firewall exploitation https://blog.intelligencex.org/ai-powered-ransomware-attacks-2025-artificial-intelligence-cybercrime https://blog.intelligencex.org/ai-powered-ransomware-attacks-2025-artificial-intelligence-cybercrime Tue, 02 Dec 2025 03:17:42 +0530 sbow AI ransomware 2025, PromptLock malware, agentic AI attacks, Claude Code ransomware, autonomous malware, AI-powered cybercrime, LLM-generated ransomware, Qilin ransomware group, AI social engineering, ransomware-as-a-service, machine learning attacks https://blog.intelligencex.org/oauth-misconfiguration-vulnerabilities-attacks-prevention-guide https://blog.intelligencex.org/oauth-misconfiguration-vulnerabilities-attacks-prevention-guide Fri, 07 Nov 2025 02:22:27 +0530 sbow OAuth misconfiguration, OAuth 2.0 security, redirect URI vulnerability, authorization code interception, OAuth CSRF attack, PKCE bypass, implicit flow vulnerabilities, OAuth token leakage, authentication security, API security https://blog.intelligencex.org/npm-supply-chain-attack-josh-junon-packages-compromised https://blog.intelligencex.org/npm-supply-chain-attack-josh-junon-packages-compromised Tue, 09 Sep 2025 11:56:41 +0530 sbow npm supply chain attack, Josh Junon Qix, chalk package compromised, debug package malware, crypto wallet hijacking, npm phishing attack, package-lock.json security, ethereum wallet attack, npm audit, supply chain security https://blog.intelligencex.org/bsides-ahmedabad-2025-cybersecurity-event-september https://blog.intelligencex.org/bsides-ahmedabad-2025-cybersecurity-event-september Mon, 01 Sep 2025 18:15:29 +0530 sbow BSides Ahmedabad 2025, cybersecurity conference, security training, Gujarat cyber event, BSides India, cybersecurity networking, DRDO keynote, John Deere CISO, security workshops, ethical hacking, bug bounty, CISO summit https://blog.intelligencex.org/cloud-security-ai-penetration-testing-trends-2025 https://blog.intelligencex.org/cloud-security-ai-penetration-testing-trends-2025 Fri, 29 Aug 2025 16:17:34 +0530 sbow cloud security 2025, AI penetration testing, zero trust evolution, adaptive trust, cloud pentesting, automated vulnerability discovery, AI-SPM, cloud threat detection, serverless security, DevSecOps automation https://blog.intelligencex.org/compliance-trends-challenges-strategies-2025 https://blog.intelligencex.org/compliance-trends-challenges-strategies-2025 Thu, 28 Aug 2025 17:22:09 +0530 sbow 2025 compliance trends, DORA regulation compliance, AI Act compliance 2025, board accountability security, third-party risk management, real-time compliance dashboards, supply chain transparency regulation, False Claims Act enforcement https://blog.intelligencex.org/how-to-pentest-llms-ai-security-testing-guide https://blog.intelligencex.org/how-to-pentest-llms-ai-security-testing-guide Thu, 28 Aug 2025 11:28:36 +0530 sbow LLM pentesting, AI security testing, prompt injection, LLM vulnerabilities, jailbreaking LLMs, AI penetration testing, large language model security, chatbot security, AI red teaming, machine learning security https://blog.intelligencex.org/AI-Security-Threats-Wild-2025 https://blog.intelligencex.org/AI-Security-Threats-Wild-2025 Wed, 27 Aug 2025 18:01:02 +0530 sbow AI security incidents 2025, vibe-hacking AI extortion, AI browser vulnerabilities, AI-based ransomware, Claude AI misuse, insecure AI access controls, AI cybersecurity governance https://blog.intelligencex.org/cve-2025-8088-winrar-zero-day-exploit https://blog.intelligencex.org/cve-2025-8088-winrar-zero-day-exploit Wed, 27 Aug 2025 17:24:15 +0530 sbow CVE-2025-8088, WinRAR zero-day exploit. path traversal vulnerability, alternate data streams (ADS), RomCom WinRAR exploit, Paper Werewolf cyberattack, WinRAR 7.13 update, spear-phishing malware campaigns