Cybersecurity Mastery

Cybersecurity Mastery

Home
Famous Cyberattacks & Stories
Security Career Tips
1:1 Coaching Call
Archive
About

Real Cyberattacks - Explained in easy steps

This is the story of the biggest hack in the NPM world (aka Shai-Hulud Attack)
This week, we're exploring Shai-Hulud — a terrifying blend of infostealer, worm, and supply-chain attack that has shaken the npm ecosystem!
 • 
Rohit Tamma
2
The First AI-Powered Ransomware: How it Works & Key Lessons
This week, we’re diving into the first AI-powered ransomware—a glimpse into the fundamental shift reshaping cyberattacks.
 • 
Rohit Tamma
How This Latest Technique Bypasses Phish Resistant Creds!
This week, we're exploring the latest technique attackers are using to silently bypass phish resistant credentials against Microsoft Entra ID.
 • 
Rohit Tamma
How Hackers Are Using This Simple Trick to Silently Disable EDR!
This week, we're exploring the latest technique attackers are using to silently disable EDR software. Interestingly this involves no malware!
 • 
Rohit Tamma
How Attackers Are Mass Exploiting This Deadly SharePoint Flaw & Key Insights
On July 18, mass exploitation of SharePoint servers started to appear in the news.
 • 
Rohit Tamma
5 Simple Methods This Infamous Hacking Group Uses to Hack High-Profile Companies
MGM Resorts hack..
 • 
Rohit Tamma
How attackers are hijacking Citrix sessions with a single weird HTTP request (a.k.a. “CitrixBleed 2”)
This week, we're exploring the latest exploitation technique attackers are using to takeover active Citrix sessions. Interestingly this involves no user…
 • 
Rohit Tamma
How a Simple Programming Mistake Took Down a $50 Million Botnet
This week, we're exploring an interesting story of how defenders quietly hacked the botnet infra that caused over $50 million in losses worldwide and…
 • 
Rohit Tamma
How Attackers Weaponized an Expired Discord Invite to Deliver Malware & Key Insights!
This week, we're exploring a recent campaign used by attackers to weaponize expired Discord invites to push malware. We’ll unpack the attack chain with…
 • 
Rohit Tamma
The AI Hack That Lets Attackers Steal Data from Copilot by Just Sending an Email!
Imagine this: No malware.
 • 
Rohit Tamma
How Attackers Are Using Google Calendar to Hide Malicious Activity?
This week, we're exploring an advanced stealth technique used by attackers to blend in seamlessly with trusted cloud services. We’ll unpack the attack…
 • 
Rohit Tamma
How an Attacker Stole 868 GB of Data with Just a Phone Call and a Virtual Machine
What is an attacker's greatest strength?
 • 
Rohit Tamma
© 2025 Rohit Tamma
Privacy ∙ Terms ∙ Collection notice
Start writingGet the app
Substack is the home for great culture