Phishing Simulation with Gophish: Realistic Campaigns Step by Step
1. Introduction Phishing simulation with Gophish is one of the most effective tools for turning the human link of an organization into a measurable layer of defense, and Gophish is, without question, the most widely used open source platform for it. Every campaign launched with Gophish returns objective, quantifiable data: how many employees opened the email, how many clicked the link and how many went as far as entering their credentials on the capture page. Thanks to that data, the awareness program stops being an annual lecture and becomes a continuous improvement process. In this article we carry out a …
Ransomware Defense: Recovery Strategies and Backup Automation
1. Introduction In 2026, ransomware has evolved: it no longer just encrypts files, but also exfiltrates data (double extortion), deletes backup snapshots, infects cloud backups, and attacks entire supply chains. According to Mandiant M-Trends 2026 and IBM X-Force reports, the average recovery time has dropped to less than 48 hours for well-prepared organizations, but exceeds two weeks for those without automation. In this article we will explore ransomware defense strategies focused on fast recovery and backup automation. We will build a complete lab with Docker Compose where we simulate an attack, execute automated recovery, and verify data integrity. 2. Ransomware …
Cloud Security: Docker Misconfigurations & Exploitation Lab
1. Introduction Docker has revolutionized how we deploy applications: lightweight, reproducible, and scalable containers. But just as a poorly configured server can be compromised, a Docker container with security vulnerabilities can expose the entire underlying infrastructure. In 2026, according to cybersecurity trend reports (Fortinet, IBM X-Force), misconfigurations in containers and orchestrators are one of the leading sources of breaches. In this article we will explore the most common Docker vulnerabilities, with a hands-on lab where we build a vulnerable container and exploit it from inside and outside. We will learn to detect and fix each configuration flaw. 2. Why are …
OSINT Techniques for Red Team Operations: Hands-on Lab
1. Introduction Before launching an attack against an organization, the attacker needs information: domains, subdomains, employee emails, technologies used, IP addresses, social media profiles, public repositories… This phase is called reconnaissance, and the tools that feed it are collectively known as OSINT (Open Source Intelligence). In this article we will explore the most effective OSINT techniques for Red Team Operations in 2026, with a step-by-step hands-on lab. We will cover everything from asset discovery to data correlation, using tools like Nmap, Subfinder, theHarvester and WFUZZ. 2. What is OSINT in Red Team? OSINT consists of collecting information from public sources …
REST API Security Testing with Burp Suite: Hands-on Lab
1. Introduction REST APIs are the nervous system of modern applications: they connect frontends to backends, microservices to each other, and enable mobile devices to access data in real time. But if a poorly protected database can be compromised with SQL injection, a poorly designed API can expose the entire infrastructure with a single payload. In this article we will perform a complete security lab on a REST API using Burp Suite, the de facto standard tool for web pentesting. We will cover everything from endpoint discovery to exploiting common vulnerabilities: IDOR, missing rate limiting, parameter injection, and authentication errors. …
Prompt Injection in LLM-based Applications: Analysis, Exploitation and Defense
Prompt injection is the modern heir of SQL injection. In this article we analyze what it is, why it tops the OWASP Top 10 for LLM Applications, and we build a complete lab: jailbreak, indirect injection and exfiltration, with its defense in depth. …
Resources for training and awareness in Cybersecurity
Resources for Cybersecurity Awareness: Phishing, BadUSB, Ransomware, etc. …
How can I send and share information anonymously?
1. Introduction. Level of Technical Knowledge: Low; Reading Time: 7 min.; Hashtags: #anonymous In this article, we will review and explain in detail various ways to send and share information anonymously, whether through emails, instant messaging, or sharing files through our own or third-party services that ensure our anonymity and peace of mind. At the end of this article, we offer you our solution with the aim of providing you with the utmost privacy and anonymity. Disclaimer: The instructions contained in this article are presented with the intent of providing anonymity to the reader. Jaymon Security is not responsible for …
What can happen if our social media accounts, email, or other applications are stolen from us?
social media email stolen …
Latest News
