The Cyber Riddler

Every vulnerability report has the line we all write: "This results in remote code execution as root." And every time, the engineer on the other side writes back: "It doesn't run as root, it runs as a dedicated, low-privilege account. Where's the PoC?"

That gap is the episode: the difference between finding a bug and actually being able to use it.

X: @almorabea
X: @CyberRiddler
Website: https://thecyberriddler.com

What happens when a penetration test starts without a clear scope? In this episode, we discuss the most common scoping mistakes in cybersecurity engagements, how they impact both clients and consultants, and why a poorly defined scope can turn a simple assessment into a nightmare. From missing assets to unrealistic expectations, we'll explore real-world lessons and best practices for getting scoping right from day one. 
X: @almorabea
X: @CyberRiddler
Website: https://thecyberriddler.com

Dive into the hidden world of Windows Event Logs — where SOC analysts uncover patterns, trace intrusions, and expose how attackers exploit the very logs meant to catch them. Learn how to spot the signals, build timelines, and stay one step ahead of the breach.  

X: @almorabea
X: @CyberRiddler
Website: https://thecyberriddler.com

In this episode of the cyber riddler, we talked about  the critical first stage of cyberattacks: Initial Access. Learn how hackers breach organizations using tactics like phishing, exploiting vulnerabilities, stolen credentials, and supply chain attacks. We’ll explore real-world examples, discuss why initial access is so crucial, and share practical strategies to defend against these threats. Whether you’re a cybersecurity professional or just curious about how breaches happen, this episode is packed with insights to help you stay one step ahead. 

Twitter: @almorabea
Twitter: @CyberRiddler
Website: https://thecyberriddler.com

In this episode, we explore the modern cybersecurity threat landscape, examining sophisticated attacks like ransomware-as-a-service, supply chain breaches, and file-less malware. We discuss essential defensive strategies, including the use of Zero Trust architecture, behavioral analytics, and other tools. Alongside these defenses, we emphasize the importance of proactive threat hunting and a strong incident response plan. This episode serves as a reminder of what you should do and hunt for threats in your environment.

Twitter: @almorabea
Twitter: @CyberRiddler
Website: https://thecyberriddler.com