I love simplicity,
If you’re finding it difficult to locate AAISM content in one place, you may find my #AAISM knowledge repository helpful: Mastering AAISM — ISACA AAISM Certification Course This site was created as part of my own AAISM exam preparation journey. Free to use, for anyone interested in this certification. I’ve consolidated my notes, research, and … More AAISM Memory Map
This week was about things slipping through process gaps: a certificate authority breached after a system migration skipped security review, an MFA bypass on VPN appliances, a WordPress update flaw dating back to 2008, and secrets leaking through an AI coding assistant’s settings file. On top of that, an AI model tried to work its … More Cyber News This Week: 02 Nov – 08 Nov 2026
Privilege Escalation exploits security flaws to grant low-privileged users administrative access. Covers horizontal vs vertical escalation, privilege separation, and mitigation. … More Privilege Escalation: How Attackers Gain Unauthorised System Control
A zero-day attack exploits vulnerabilities before a patch exists. Learn about the five-phase window of exposure and layered defences. … More Zero-Day Attacks: What They Are and How to Defend Against Them
Brute force attacks use exhaustive trial-and-error to guess credentials. Covers normal vs reverse brute force, session ID attacks, and practical prevention. … More Brute Force Attacks: How Attackers Crack Passwords and How to Stop Them
Directory indexing exposes server file structures when no default index page exists, enabling attackers to find backup files, config files, and naming conventions. … More Directory Indexing Attacks: When Your Web Server Reveals Too Much
Information leakage through HTML comments, verbose error messages, and plaintext data gives attackers the clues needed for SQL Injection and other attacks. … More Information Leakage Attacks: How Applications Unintentionally Reveal Sensitive Data
SMTP has no built-in security — messages are unencrypted and can be forged. SMTP-AUTH adds authentication that prevents unauthorised relay while enabling legitimate use from anywhere. … More SMTP-AUTH: Securing Email Transmission and Preventing Spam Relay
HTTP Verb Tampering exploits misconfigured VBAAC rules by using unlisted HTTP methods to bypass access controls. Covers the vulnerability, examples, and prevention. … More HTTP Verb Tampering: Bypassing Security Controls with Unexpected HTTP Methods
