Threat intelligence, defensive security, career guidance and best practices — 28 in-depth guides from the HTP team.
Threat Intelligence
On-chain trackers link up to $5.8 billion in cryptocurrency moving out of Binance hot wallets on October 29, 2026. Tether and Circle froze $2.54 billion. What is confirmed, what is still rumor, and what to watch next.
Threat Intelligence
More than 40,000 Department of Homeland Security employees — names, phone numbers, email addresses and field office assignments — published by the leak site Distributed Denial of Secrets. The data exposes agents assigned to special operations, surveillance and undercover work: the third major US government leak in a month.
Threat Intelligence
Attackers broke into Microsoft 365 accounts at 79 organizations without ever needing a password — stealing post-MFA session tokens, replaying them within minutes, registering rogue devices and hiding victims' mail with secret inbox rules. What happened, and what to check right now.
Career & Certifications
Start bug bounty hunting in 2026: the skills to learn first, the essential tools, how to choose your first programme, and the beginner bugs that actually get paid.
Defensive Security
Learn Nmap from zero in this beginner tutorial: host discovery, port scanning, service and OS detection and NSE scripts — plus the legal rules and the defender's view.
Best Practices
Password cracking explained: stolen hashes, GPU brute force, dictionary rules and credential stuffing — and the simple defences that make your passwords uncrackable.
Threat Intelligence
Two critical PHP vulnerabilities — CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2 — allow unauthenticated remote code execution on millions of servers. Governments took national services offline, Cloudflare saw early attacks, and updating WordPress does not fix it. What happened, who is exposed, and what to do right now.
Threat Intelligence
AI writes phishing emails, hunts vulnerabilities, and clones voices — and it also triages alerts, hunts threats, and patches code. The same technology fights on both sides. Here is what that means for security, and for your career.
Exploits & Zero-Days
CVE-2021-44228. CVE-2023-23397. These codes appear in every breach headline — but what exactly is a CVE, who assigns it, and how do professionals use the system to decide what to patch first? A complete beginner-friendly guide.
Career & Certifications
Motivation gets you started for a week. Discipline sermons make you feel guilty for a month. What actually carries people into cybersecurity careers is embarrassingly simple: a schedule, a system, and a roadmap they can see. Here is all three.
Threat Intelligence
Altenen is a clearweb hub for carding and payment-fraud discussion. For defenders, its open structure is a gift: fraud TTPs surface here before they hit your checkout page.
Threat Intelligence
Dark Forums trades in stealer logs, combolists, and database dumps. Monitored responsibly, it gives defenders early warning that corporate credentials are circulating.
Threat Intelligence
Dread is the darknet's Reddit: market governance, OpSec debates, and takedown post-mortems. For analysts, it is a masterclass in how adversaries think about risk.
Threat Intelligence
Exploit.IN is where advanced vulnerability research surfaces first. Defenders who track its themes can prioritize patching before exploits go mainstream.
Threat Intelligence
XSS.is hosts elite exploit and malware research behind strict vetting. Its public footprint still reveals which techniques defenders must prepare for next.
Threat Intelligence
CryptBB vets members with technical challenges behind Tor. Understanding gated collectives helps defenders model the patient, skilled end of the threat spectrum.
Threat Intelligence
BHF commercializes stealer logs and automated credential checking. Each listing is a reminder: identity is the perimeter, and it is under constant automated assault.
Threat Intelligence
Cracked.ax trades in automated account checkers and stuffing configs. Studying this tooling tells defenders exactly what their login pages must withstand.
Exploits & Zero-Days
Zero-day vulnerabilities capture headlines and command million-dollar bounties. But what really happens behind the scenes between initial discovery, weaponization, and vendor patches?
Threat Intelligence
Gone are the days when ransomware merely locked desktop files with simple AES. Modern Ransomware-as-a-Service (RaaS) syndicates now operate like multinational cartels.
Threat Intelligence
Modern phishing is not a Nigerian prince email with broken grammar. Today's campaigns utilize reverse proxies, AI voice impersonation, and real-time MFA interception.
Best Practices
Passwords have plagued our digital security for over 50 years. Passkeys, built on the FIDO Alliance standard, promise to eliminate credential stuffing forever.
Career & Certifications
With over 3.5 million unfilled cybersecurity vacancies worldwide, how do you navigate the noise, choose the right certifications, and land your first junior role?
Defensive Security
Enterprises rarely stay on a single cloud. But managing IAM policies, networking rules, and compliance across AWS, Azure, and Google Cloud creates dangerous blind spots.
Defensive Security
What really happens when a high-severity alert flashes on the SOC dashboard? Walk through an 8-hour shift fighting real adversary intrusions.
Exploits & Zero-Days
Modern single-page applications and mobile apps run on APIs. Understand the most rampant API vulnerabilities including BOLA, Broken Object Property Level Auth, and Unrestricted Resource Consumption.
Exploits & Zero-Days
Reverse engineering is the superpower of cybersecurity. Learn how compilers transform high-level C code into assembly, and how to decompile mysterious binaries with NSA's Ghidra.
Threat Intelligence
Attackers are weaponizing AI for automated reconnaissance and evasion. Here is how modern blue teams use unsupervised learning to fight back.
Turn this knowledge into skill with practical step-by-step courses.
Browse Courses
HACK THE PLANET