Threat Actors Exploit Flaws in Openwave and Cisco BroadWorks Platforms
Adversaries are actively targeting vulnerabilities in Openwave Webtop Media Transcoder and Cisco BroadWorks, prompting CISA to mandate federal remedi…
Application Security
New The Hispion Blog is live — practical security guides
Your first step to stronger security
Hispion brings together a directory of 2,900+ security tools, daily cybersecurity news, hands-on guides, an interactive security knowledge map and free website security audits — all in one place.
Everything you need to learn, find tools and stay secure
Free resources for students, IT teams, developers and businesses — built and maintained by the Hispion team in Erbil.
Cybersecurity Tools Directory
2,900+ hand-picked tools across 24 categories — from penetration testing and OSINT to SIEM and cloud security — with an AI Tool Finder, votes and top picks.
Browse the directoryFree Website Security Audit
Expert review of your website's security — vulnerabilities, misconfigurations and clear fixes. Your first audit is free.
Request an auditDaily Cybersecurity News
Breaches, ransomware, zero-days and threat intelligence — explained clearly with practical advice. 25 new stories this week.
Read the newsBlog & Guides
Step-by-step tutorials on blue team, ethical hacking, cloud, Linux, networking, DFIR, privacy and careers.
- Zero Trust Explained Without the Buzzwords: A Practical Guide
- How to Streamline Cloud Supplier Due Diligence and Third-Party Risk
- What a SIEM Does and How to Write Your First Detection Rule
CyberMap
An interactive map of 821 cybersecurity terms and how they connect — a visual glossary for learners.
Explore the mapAPI Analyzer Coming soon
Scan API endpoints for injection, broken authentication, CORS and rate-limit problems, with a clear remediation report.
Learn more Live from the directory
Top picks
Tools the community rates highest
Latest cybersecurity news
All news
What's happening in security right now
Vulnerability
Microsoft Patches 1,235 Flaws in November 2026 Update, Fixing Outlook Zero-Day
Microsoft resolved 1,235 vulnerabilities in its November 2026 Patch Tuesday release, including an actively exploited Outlook spoofing zero-day that l…
Cloud Security
Threat Actors Abuse Trusted AWS Roles in Qubole Platform to Breach Cloud Environments
Attackers abused compromised Qubole IAM credentials to access downstream AWS environments through cross-account roles, harvesting secrets and stealin…
Browser Security
Google Fixes Eighth Exploited Chrome Zero-Day Flaw of the Year
Google released emergency desktop updates for Chrome to fix CVE-2026-125350, an actively exploited memory corruption flaw in its XML parser and the e…
Learn & protect
Visit the blog
Guides to build your security skills
Guides & Tutorials
Zero Trust Explained Without the Buzzwords: A Practical Guide
Zero Trust is not a product you can buy; it is an architectural strategy. Here is how it actually works, why perimeter defense failed, and how to sta…
Cloud Security
How to Streamline Cloud Supplier Due Diligence and Third-Party Risk
Static annual vendor questionnaires fail to capture dynamic cloud risks. Here is how to modernize your third-party risk management and perform effect…
What a SIEM Does and How to Write Your First Detection Rule
A SIEM centralizes logs to help security teams spot attacks early. Here is how modern SIEMs work, paired with a practical guide to writing your first…
Blue Team & SOCDefensive strategies and monitoring to stop threats early.
Cloud SecuritySecure AWS, Azure, Google Cloud and SaaS environments.
Ethical HackingTest systems responsibly to find and fix weaknesses.
LinuxCommand-line skills and hardening every defender needs.
Forensics & Incident ResponseInvestigate incidents and respond quickly.
NetworkingProtocols, ports and network defence fundamentals.
CyberMap
See how cybersecurity concepts connect
CyberMap is an interactive knowledge graph of 821 security terms and 2,083 connections. Click any concept to see its definition and related ideas — the fastest way to learn the language of security.
Term of the day
Burp Extensions
Open CyberMap
Browse the glossary
Burp Extensions are plugins that extend the functionality of Burp Suite. These extensions can provide additional scanning capabilities, custom attack vectors, or integrations with other security tools.
Security knowledge and tools, accessible to everyone
Free to use
The directory, news, blog and CyberMap are free. Your first website audit is free too.
Built by practitioners
Founded in Erbil in 2023 by a cybersecurity student and run by people who work in security.
Always current
New tools, stories and guides every day — with sources cited and human editors in the loop.
Privacy first
No selling of personal data. Report vulnerabilities to us any time through responsible disclosure.
Is your website secure? Let's find out — for free.
Our team checks your site for common vulnerabilities and misconfigurations and sends you a clear report with fixes.
Request my free audit