Drupal Fixes Critical Commerce Core Flaw Exploited Against E-Commerce Sites
Drupal has issued an urgent advisory for an actively exploited access bypass vulnerability in Commerce Core that allows unauthenticated attackers to…
New The Hispion Blog is live — practical security guides
Your first step to stronger security
Hispion brings together a directory of 2,900+ security tools, daily cybersecurity news, hands-on guides, an interactive security knowledge map and free website security audits — all in one place.
Everything you need to learn, find tools and stay secure
Free resources for students, IT teams, developers and businesses — built and maintained by the Hispion team in Erbil.
Cybersecurity Tools Directory
2,900+ hand-picked tools across 24 categories — from penetration testing and OSINT to SIEM and cloud security — with an AI Tool Finder, votes and top picks.
Browse the directoryFree Website Security Audit
Expert review of your website's security — vulnerabilities, misconfigurations and clear fixes. Your first audit is free.
Request an auditDaily Cybersecurity News
Breaches, ransomware, zero-days and threat intelligence — explained clearly with practical advice. 3 new stories this week.
Read the newsBlog & Guides
Step-by-step tutorials on blue team, ethical hacking, cloud, Linux, networking, DFIR, privacy and careers.
- Hidden Capabilities in AI Models: How Cryptographic Backdoors Defeat Audits
- How to Set Up a Private Ghidra Server for Collaborative Malware Analysis
- A Guide to Autonomous Endpoint Security and AI Agent Defense
CyberMap
An interactive map of 810 cybersecurity terms and how they connect — a visual glossary for learners.
Explore the mapAPI Analyzer Coming soon
Scan API endpoints for injection, broken authentication, CORS and rate-limit problems, with a clear remediation report.
Learn more Live from the directory
Top picks
Tools the community rates highest
Latest cybersecurity news
All news
What's happening in security right now
CISA Adds Exploited GitLab Critical RCE and Cisco Firewall Flaws to KEV Catalog
CISA added a maximum-severity GitLab remote code execution vulnerability and a Cisco firewall denial-of-service flaw to its KEV catalog following con…
Threat Intelligence
China-Nexus Hackers Exploit VMware Zero-Day and Firewall Vulnerability Chains
State-aligned Chinese threat actors weaponized a VMware ESX logging zero-day and combined PHP2Shell bugs with the Linux Fragnesia flaw to compromise…
Spyware
Intellexa Spyware Scandal Three Escape US Sanctions Net
In a surprise move, the U.S. Treasury Department has lifted sanctions on three individuals previously associated with the Intellexa Consortium, the g…
Learn & protect
Visit the blog
Guides to build your security skills
Hidden Capabilities in AI Models: How Cryptographic Backdoors Defeat Audits
New research shows adversaries can embed provably hidden, encrypted capabilities inside neural networks. Here is how these backdoors work and how to…
Digital Forensics & IR
How to Set Up a Private Ghidra Server for Collaborative Malware Analysis
Snapshot rollbacks in malware analysis labs often wipe out hours of reverse engineering. Here is how to configure Ghidra Server for centralized proje…
A Guide to Autonomous Endpoint Security and AI Agent Defense
Modern cyberattacks move from initial foothold to full compromise in minutes. Discover how autonomous attack disruption and agentic AI defenses prote…
Blue Team & SOCDefensive strategies and monitoring to stop threats early.
Cloud SecuritySecure AWS, Azure, Google Cloud and SaaS environments.
Ethical HackingTest systems responsibly to find and fix weaknesses.
LinuxCommand-line skills and hardening every defender needs.
Forensics & Incident ResponseInvestigate incidents and respond quickly.
NetworkingProtocols, ports and network defence fundamentals.
CyberMap
See how cybersecurity concepts connect
CyberMap is an interactive knowledge graph of 810 security terms and 2,039 connections. Click any concept to see its definition and related ideas — the fastest way to learn the language of security.
Term of the day
Zero-Day Vulnerability
Open CyberMap
Browse the glossary
A vulnerability that is unknown to the software vendor and for which no patch is available. Zero-day vulnerabilities are particularly dangerous because attackers can exploit them before the vendor can release a fix.
Security knowledge and tools, accessible to everyone
Free to use
The directory, news, blog and CyberMap are free. Your first website audit is free too.
Built by practitioners
Founded in Erbil in 2023 by a cybersecurity student and run by people who work in security.
Always current
New tools, stories and guides every day — with sources cited and human editors in the loop.
Privacy first
No selling of personal data. Report vulnerabilities to us any time through responsible disclosure.
Is your website secure? Let's find out — for free.
Our team checks your site for common vulnerabilities and misconfigurations and sends you a clear report with fixes.
Request my free audit