Skip to main content
Latest research
Web Security
Web Security

Augmenting SR-BH 2020: A Technical Methodology for Modern Threat Simulation

A comprehensive enhancement of the SR-BH 2020 dataset for WAF training, combining LLM-assisted labeling, diverse benign traffic, and targeted attack injection to improve training data quality.

Omar Elebiary Senior Cyber Security Researcher
Jul 8, 2026 · 6 min read

Latest advisories

View all
8.6 CVE-2025-15517 Archer NX600 +3

Multiple TP-Link Routers: Authorization Bypass in HTTP Server

Saifeldeen Aziz· Mar 23, 2026
8.5 CVE-2025-15605 Archer NX600 +3

Multiple TP-Link Routers: Hardcoded Configuration Encryption Key

Saifeldeen Aziz· Mar 23, 2026
8.5 CVE-2025-15518 Archer NX600 +3

Multiple TP-Link Routers: Post Authentication Command Injection in CLI controlBF Handler

Saifeldeen Aziz· Mar 23, 2026

Recent posts

All posts
Web Security
Web Security

WAF Evasion 101: How Attackers Bypass “Security Gates”

Attackers reshape the same malicious payload just enough that the WAF no longer recognizes it, while the backend still executes it exactly as intended. This post walks through the real evasion playbook (encoding tricks, token splitting, noise injection, and reinforcement-learning-driven automated probing) and shows why the problem is structural, not a matter of sloppy engineering.

Ahmed Maghawry · Jul 27, 2026 · 14 min
AI Security
AI Security

Why High Accuracy Can Still Mean Bad Security !

High accuracy in security does not guarantee real-world protection. Through the WAMM research study, this post examines what accuracy metrics hide, how false positives and false negatives manifest in production environments, and what a security-grade evaluation framework should actually measure.

Ahmed Maghawry · Jul 12, 2026 · 5 min
Telecom Security
Telecom Security

Attacks on the Radio Interface

Part 2 of the RAN Security series. This post explores different attack surfaces, attack vectors, and attack scenarios across the RAN, explaining categories of threats and attacker TTPs supported by attack flow illustrations.

Wessam Deif Allah · Jun 16, 2026 · 12 min
AI Security
AI Security

Can AI Detect Web Attacks Better Than Rules?

The real challenge is not choosing rules or AI, but designing detection systems that can operate under uncertainty and adversarial pressure. This article examines web attack detection and WAF evasion through scientific research and real-world observations.

Ahmed Maghawry · Jun 16, 2026 · 15 min
Web Security
Web Security

CyCTF 2023 Challenge: A Whitebox Walkthrough of "The Secret App v1.0"

A whitebox walkthrough of the CyCTF 2023 'Secret App v1.0' challenge — chaining second-order blind SQL injection, a CAPTCHA logic flaw, and insecure session handling into a full admin account takeover.

Hussein Misbah · Jun 16, 2026 · 14 min
Telecom Security
Telecom Security

RAN Introduction and its Criticality

Part 1 of the RAN Security series. When people talk about mobile network security, the conversation almost always gravitates toward the core network. However, there is another part of the network that quietly sits in public spaces, exposed by design: the Radio Access Network (RAN).

Wessam Deif Allah · Jun 16, 2026 · 3 min