최신 게시물

What is the CIA triad? Confidentiality, integrity and availability explained, with a real attack on each and commands to check them on your own systems.

How to list the ports a Linux server is listening on with ss and lsof, read the output, and decide which services should not be exposed.

What Windows Event ID 4625 means, how to read its status codes and logon types, and how to tell a mistyped password from a brute-force or password spraying attack.

Learn how to check email headers for phishing. View full headers in Outlook, Gmail and Apple Mail, read the Received chain and understand SPF, DKIM and DMARC results.

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets an unauthenticated threat actor run code on PHP servers. Learn how the attack works and how to patch it.

Learn how to change careers into cybersecurity in 2026. Discover the skills, certifications, career paths and job-search strategies you need to get started.

The sun is shining. Out-of-office messages are going out. Half of the security team is wrestling for space around a hotel pool. The rest are frantically trying to figure out who can approve an emergency firewall upgrade.

Learn how to detect DNS tunnelling in Wireshark by analysing an Iodine PCAP. Identify unusual DNS queries, changing subdomains, encoded data and traffic patterns.

In this post, we’re taking a look at the different styles of cybersecurity and IT training, how people actually retain technical skills, and why we at Gemforge Labs are advocates that practical gamified learning is one of the most effective ways to build lasting knowledge.