If you haven’t listened to Darknet Diaries yet, you’re missing out.

HumbleBundle has released a new AI-focused bundle: the Humble Tech Book Bundle: The Claude Code Mastery Bundle by Zenva featuring (for 22,72€) 8 books in PDF and ePub format published by Zenva.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Ethical Hacking and Cyber Defense by Packt featuring (in the highest tier for 16,77€) 21 books in PDF and ePub format published by Packt.

HumbleBundle has released another Cybersecurity-related book bundle called Humble Tech Book Bundle: Cybersecurity by Wiley including real classic books from Bruce Schneier and Kevin Mitnick.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Hacking 2025 by No Starch featuring (in the highest tier for 33,36 €) 18 books in PDF, ePub and mobi format.

As you may already know, October is Cybersecurity Awareness Month!

HumbleBundle released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Security by APress featuring (in the highest tier for 21,32€) 25 books in ePUB format published by APress.

HumbleBundle have released another cybersecurity related bundle: the Humble Tech Book Bundle: The Pentesting and Hacking Toolkit by Packt.

Are you currently studiying for some certification? Then the the Humble Tech Book Bundle: Networking and Security Cert Prep by Pearson IT Certification and Exam Cram might be what you’re looking for. It features (in the highest tier for 23,15€) 16 books in PDF format published by Pearson.

HumbleBundle has another offer on an Cybersecurity related book bundle: the Humble Tech Book Bundle: Ultimate Cybersecurity Career by Packt.

Do you don’t like reading about cyber security topics?

Then maybe the Humble Audio Book Bundle: Cybersecurity and Forensics by Packt is for you!

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Hacking 2024 by No Starch featuring (in the highest tier for 34,57 €) 18 books in PDF, ePub and mobi format.

HumbleBundle has released another Cybersecurity-related bundle: the Cybersecurity Month Mega Bundle from O'Reilly featuring (in the highest tier for 22,83€) 22 books in PDF and ePub format published by O’Reilly.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Threat Intelligence by Packt featuring (in the highest tier for 16,57€) 17 books in PDF and ePub format published by Packt.

Only short after the last bundle, yet another book bundle covering certifications has been released by HumbleBundle: the Humble Tech Book Bundle: Sybex CompTIA and more by Wiley.

If you are planning to get certified (like me :)), you may find the the Humble Tech Book Bundle: Get Certified! by Packt from HumbleBundle useful.

Another Cybersecurity-related bundle by HumbleBundle is now available: the Humble Tech Book Bundle: Cybersecurity by Pearson featuring (in the highest tier for 23,19€) 18 books in PDF format published by Pearson.

Currently, HumbleBundle offers the Cyber Security: Zero to Hero-Bundle featuring a lot of cyber security related video series.

Here you’ll find recommended Videos, Podcasts and other media.

This collection is not complete and in no special order. It will get updated along my way, for sure.

If you haven’t listened to Darknet Diaries yet, you’re missing out.

Tyler Ramsbey, a professional Pentester, has released his new (paid) course on Foundations of Web App Pentesting including 80+ videos, 30+ custom labs, and 160 hours of lab time.

Tyler Ramsbey, a professional Pentester, has released his new (paid) course on Sliver C2: Pentesting and Evasion including 80 hours of fully hosted lab time.

Tyler Ramsbey, a professional Pentester, has released his own (paid) Hands-On Hacking Labs platform including the first AD Challenge called BuildingMagic.

Over on the Simply Cyber Academy a new learning course was released: OSINT for Pentesters by Mishaal Khan.

Tyler Ramsbey, a professional Pentester, has released another learning course on the Simply Cyber Academy: Hands-On Phishing.

The Simply Cyber Academy has just released another completly free course: Hacking Active Directory by Ryan Yager.

Over on the Simply Cyber Academy you can now sign up completly free for the course How to Break into GRC: Mindset, Methods, Skills.

Tyler Ramsbey, a professional Pentester, has released a free learning course on the Simply Cyber Academy: Introduction to Hacking Methodology.

If you want to experiment and/or develop locally with/for AI, check out these tools:

Here you’ll find recommended Videos, Podcasts and other media.

This collection is not complete and in no special order. It will get updated along my way, for sure.

Here you’ll find recommended Online-References, Cheatsheets and Books.

This collection is not complete and in no special order. It will get updated along my way, for sure.

Here you’ll find recommended Learning & Practicing- and News-Sites.

This collection is not complete and in no special order. It will get updated along my way, for sure.

Here you’ll find recommended Tools (online/offline) and Hardware.

This collection is not complete and in no special order. It will get updated along my way, for sure.

If you haven’t listened to Darknet Diaries yet, you’re missing out.

AI is undoubtedly the biggest disruptive technology that society has experienced to date.

Proxmox Virtual Environment is an open-source server virtualization platform combining KVM hypervisor, LXC containers, software-defined storage and networking — all managed through a single web interface.

When you manage to get access to a system by the means of a reverse shell, chances are that you want to stabilize your new shell to have a real terminal (tty).

Proxmox Virtual Environment is an open-source server virtualization platform combining KVM hypervisor, LXC containers, software-defined storage and networking — all managed through a single web interface.

HumbleBundle has released a new AI-focused bundle: the Humble Tech Book Bundle: The Claude Code Mastery Bundle by Zenva featuring (for 22,72€) 8 books in PDF and ePub format published by Zenva.

The new version 2.7.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

The 52nd Cologne OWASP Stammtisch takes place on Thursday, May 21, 2026 at REWE Digital, Schanzenstr. 6-20, Kupferwerk 2.20, 1st Floor, Cologne. Doors open at 19:00, talk starts at 19:30.

UPDATE

Another small patch release (v0.56.2) is out, fixing one issue:

OWASP Juice Shop is an intentionally insecure web application used for security training, CTF challenges, and awareness demos — widely regarded as the most modern and comprehensive platform of its kind.

The new version 2.7.0 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Wazuh is an open-source security platform that delivers combined XDR and SIEM functionality to safeguard endpoints and cloud workloads.

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

An updated release of Pynitrokey, the Python client for Nitrokey devices, is now available: version 0.12.0.

Kali Linux has been released in version 2026.1.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Ethical Hacking and Cyber Defense by Packt featuring (in the highest tier for 16,77€) 21 books in PDF and ePub format published by Packt.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

The updated version 2.6.0 of the Nitrokey-app2, the graphical application for managing and using Nitrokey 3 devices, has now been officially released.

Tyler Ramsbey, a professional Pentester, has released his new (paid) course on Foundations of Web App Pentesting including 80+ videos, 30+ custom labs, and 160 hours of lab time.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

UPDATE 2

Another bugfix release (v.0.55.3) is now available, which addresses these bugs:

UPDATE #2

Another bugfix release (v2.5.2) has been released.

This bugfix release fixes the PIN input dialogs being disabled.

A new update for Pynitrokey, the Python client for Nitrokey devices, is now available: version 0.11.3.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

HumbleBundle has released another Cybersecurity-related book bundle called Humble Tech Book Bundle: Cybersecurity by Wiley including real classic books from Bruce Schneier and Kevin Mitnick.

The latest stable release (012) of Momentum, a custom firmware for the Flipper Zero, is now available.

I’ve finished the Advent of Cyber 2025 at TryHackMe!

Again it was a lot of fun, and I have deepened my knowledge in some subjects.

The graphical application to manage and use Nitrokey 3 devices called Nitrokey-app2, is now available in a new version 2.4.3.

UPDATE

Shortly after, version 0.54.1 has been released.

A small patch release to fix layout issues in scope, match & replace, SDK slots and HTTPQL usage.

---

ORIGINAL

Kali Linux has been released in version 2025.4.

Yes, it’s this time of year again…

The TryHackMe Recap for 2025 is now live.

If you haven’t noticed already: the yearly hacking challenge over at TryHackMe has begun…

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Hacking 2025 by No Starch featuring (in the highest tier for 33,36 €) 18 books in PDF, ePub and mobi format.

UPDATE

Pynitrokey version 0.11.2 has also been released.

Changelog:

Allow cffi v2 dependency
Allow cryptography v46
PIV: Fix 9C key generation
Update pyscard in lock file
Add support for unauthenticated NetHSM shutdown Handle missing packages when logging package versions and release v0.11.1

---

UPDATE

UPDATE

Version 0.53.1 has been released shortly after, which addresses some bugs:

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

A small update (version 1.8.3) of the Nitrokey 3 firmware has been released.

Tyler Ramsbey, a professional Pentester, has released his new (paid) course on Sliver C2: Pentesting and Evasion including 80 hours of fully hosted lab time.

As you may already know, October is Cybersecurity Awareness Month!

Caido version 0.52.0 is now live. Built entirely in Rust, Caido is quickly establishing itself as a powerful alternative to tools like Burp Suite and OWASP Zap.

Kali Linux has been released in version 2025.3.

The summary of the changelog since the 2025.2 release from June is:

Wazuh, is an open-source security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads.

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

Tyler Ramsbey, a professional Pentester, has released his own (paid) Hands-On Hacking Labs platform including the first AD Challenge called BuildingMagic.

UPDATE

An bugfix release v0.51.1 was published.

This release fixes an issue where workflow node dialogs would not properly update.

The final version 1.8.2 of the Nitrokey 3 firmware has been released.

UPDATE

v2.4.1 was released shortly after. Now also binaries for Windows and macOS are available.

Another update to Pynitrokey, the Python client for Nitrokey devices, has been released: version 0.10.0.

Over on the Simply Cyber Academy a new learning course was released: OSINT for Pentesters by Mishaal Khan.

Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available in a new version 2.3.5.

UPDATE 01.08.2025

Another patch, v0.50.2 was released.

This patch includes the following bug fix:

HumbleBundle released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Security by APress featuring (in the highest tier for 21,32€) 25 books in ePUB format published by APress.

UPDATE

Meanwhile, two small bugfix releases (0.9.1 and 0.9.2) have also been published.

HumbleBundle have released another cybersecurity related bundle: the Humble Tech Book Bundle: The Pentesting and Hacking Toolkit by Packt.

Tyler Ramsbey, a professional Pentester, has released another learning course on the Simply Cyber Academy: Hands-On Phishing.

Today, the latest stable version 011 of the Flipper Zero custom firmware called Momentum has been released.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.49.0).

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

Kali Linux has been released in version 2025.2.

The summary of the changelog since the 2025.1a release from March is:

UPDATE

v0.8.5 was now also released.

This release fixes a bug in nk3 secrets when handling base32 secrets if the length is a multiple of 8.

Steve McMichael from the the Simply Cyber Academy has released an Open Source CSF Profile Assessment Database.

The Simply Cyber Academy has just released another completly free course: Hacking Active Directory by Ryan Yager.

UPDATE

Short after, version 0.48.1 has been released.

Over on the Simply Cyber Academy you can now sign up completly free for the course How to Break into GRC: Mindset, Methods, Skills.

If you own a Flipper Zero, you should already know about the Momentum Firmware. The team behind this custom firmware has now released the latest stable firmware release 010.

Are you currently studiying for some certification? Then the the Humble Tech Book Bundle: Networking and Security Cert Prep by Pearson IT Certification and Exam Cram might be what you’re looking for. It features (in the highest tier for 23,15€) 16 books in PDF format published by Pearson.

A new version 0.8.0 of Pynitrokey, the Python client for Nitrokey devices, has been released.

Kali Linux has been released in version 2025.1a.

The summary of the changelog since the 2024.4 release from December is:

Update: v0.47.1 has been released short after.

This is a patch release to fix an issue where users could not connect to remote Caido instances.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.47.0).

A new version 0.7.4 of Pynitrokey, the Python client for Nitrokey devices, has been released.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.46.0).

I’m making good progress, and have now also completed the Web Fundamentals Learning Path at TryHackMe!

RustScan, the modern and fast port scanner, has just been released in version 2.4.1.

Tyler Ramsbey, a professional Pentester, has released a free learning course on the Simply Cyber Academy: Introduction to Hacking Methodology.

I’ve completed the Cyber Security 101 Learning Path at TryHackMe!

A security update for the firmware of the Nitrokey 3 has been released: version 1.8.1.

HumbleBundle has another offer on an Cybersecurity related book bundle: the Humble Tech Book Bundle: Ultimate Cybersecurity Career by Packt.

The team behind the Momentum Firmware for the Flipper Zero have released the latest stable firmware release 009.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has now released their latest version (0.45.0).

UPDATE

Short after, Pynitrokey 0.7.3 was released to address a problem with older (<= 3.11) Python versions.

The latest version (1.3.2) of Sniffnet adds some more features and improvements:

Do you don’t like reading about cyber security topics?

Then maybe the Humble Audio Book Bundle: Cybersecurity and Forensics by Packt is for you!

I’ve finished the Advent of Cyber 2024 at TryHackMe!

It was a lot of fun, and I’ve learned a lot of new topics.

Kali Linux has been released in version 2024.4.

The summary of the changelog since the 2024.3 release from September is:

The firmware of the Nitrokey 3 has been updated to version 1.8.0. Also a new version 0.7.1 of Pynitrokey has been released.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Hacking 2024 by No Starch featuring (in the highest tier for 34,57 €) 18 books in PDF, ePub and mobi format.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.7.0.

If you -like me- enjoy learning on TryHackMe, then you may already have noticed a new information on your dashboard:

The new version 2.3.3 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available.

The yearly hacking challenge over at TryHackMe is about to begin…

The team behind the Momentum Firmware for the Flipper Zero have released the latest firmware release 008.

Caido, a growing alternative to Burp Suite or OWASP Zap, has now released their latest version (0.43.1).

HumbleBundle has released another Cybersecurity-related bundle: the Cybersecurity Month Mega Bundle from O'Reilly featuring (in the highest tier for 22,83€) 22 books in PDF and ePub format published by O’Reilly.

The new version 2.3.2 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.5.0.

Kali Linux has been released in version 2024.3.

The summary of the changelog since the 2024.2 release from June is:

Since the Xtreme Firmware for the Flipper Zero went into the void at the end of July 2024, I was looking for a replacement.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Threat Intelligence by Packt featuring (in the highest tier for 16,57€) 17 books in PDF and ePub format published by Packt.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.50.

Only short after the last bundle, yet another book bundle covering certifications has been released by HumbleBundle: the Humble Tech Book Bundle: Sybex CompTIA and more by Wiley.

The latest version (1.3.1) of Sniffnet has some more improvements:

The new version 2.3.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

If you are planning to get certified (like me :)), you may find the the Humble Tech Book Bundle: Get Certified! by Packt from HumbleBundle useful.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.48.

The new firmware version 1.7.2 for the Nitrokey 3 has been released and is now officially available.

Kali Linux has been released in version 2024.2.

The summary of the changelog since the 2024.1 release from February is:

Another Cybersecurity-related bundle by HumbleBundle is now available: the Humble Tech Book Bundle: Cybersecurity by Pearson featuring (in the highest tier for 23,19€) 18 books in PDF format published by Pearson.

The new version 1.7.0 of the Nitrokey 3 firmware and the new version 2.3.0 of the Nitrokey-app2 have been released and are now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.47.

The latest version (1.3.0) of Sniffnet has a lot of bugfixes and new features:

Proxmox Virtual Environment is an open-source server virtualization platform combining KVM hypervisor, LXC containers, software-defined storage and networking — all managed through a single web interface.

I’m currently experimenting with Wazuh, an Open Source Security Platform featuring XDR and SIEM protection, in my homelab.

I’m currently doing the Practical Ethical Hacking Course on the TCM Security Academy.

Proxmox Virtual Environment is an open-source server virtualization platform combining KVM hypervisor, LXC containers, software-defined storage and networking — all managed through a single web interface.

HumbleBundle has released a new AI-focused bundle: the Humble Tech Book Bundle: The Claude Code Mastery Bundle by Zenva featuring (for 22,72€) 8 books in PDF and ePub format published by Zenva.

The new version 2.7.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

UPDATE

Another small patch release (v0.56.2) is out, fixing one issue:

OWASP Juice Shop is an intentionally insecure web application used for security training, CTF challenges, and awareness demos — widely regarded as the most modern and comprehensive platform of its kind.

The new version 2.7.0 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Wazuh is an open-source security platform that delivers combined XDR and SIEM functionality to safeguard endpoints and cloud workloads.

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

An updated release of Pynitrokey, the Python client for Nitrokey devices, is now available: version 0.12.0.

Kali Linux has been released in version 2026.1.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

The updated version 2.6.0 of the Nitrokey-app2, the graphical application for managing and using Nitrokey 3 devices, has now been officially released.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

UPDATE 2

Another bugfix release (v.0.55.3) is now available, which addresses these bugs:

UPDATE #2

Another bugfix release (v2.5.2) has been released.

This bugfix release fixes the PIN input dialogs being disabled.

A new update for Pynitrokey, the Python client for Nitrokey devices, is now available: version 0.11.3.

Wazuh is an open-source security solution offering integrated XDR and SIEM capabilities to protect endpoints and cloud-based workloads.

The graphical application to manage and use Nitrokey 3 devices called Nitrokey-app2, is now available in a new version 2.4.3.

UPDATE

Shortly after, version 0.54.1 has been released.

A small patch release to fix layout issues in scope, match & replace, SDK slots and HTTPQL usage.

---

ORIGINAL

Kali Linux has been released in version 2025.4.

UPDATE

Pynitrokey version 0.11.2 has also been released.

Changelog:

Allow cffi v2 dependency
Allow cryptography v46
PIV: Fix 9C key generation
Update pyscard in lock file
Add support for unauthenticated NetHSM shutdown Handle missing packages when logging package versions and release v0.11.1

---

UPDATE

UPDATE

Version 0.53.1 has been released shortly after, which addresses some bugs:

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

A small update (version 1.8.3) of the Nitrokey 3 firmware has been released.

Caido version 0.52.0 is now live. Built entirely in Rust, Caido is quickly establishing itself as a powerful alternative to tools like Burp Suite and OWASP Zap.

Kali Linux has been released in version 2025.3.

The summary of the changelog since the 2025.2 release from June is:

Wazuh, is an open-source security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads.

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

UPDATE

An bugfix release v0.51.1 was published.

This release fixes an issue where workflow node dialogs would not properly update.

The final version 1.8.2 of the Nitrokey 3 firmware has been released.

UPDATE

v2.4.1 was released shortly after. Now also binaries for Windows and macOS are available.

Another update to Pynitrokey, the Python client for Nitrokey devices, has been released: version 0.10.0.

Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available in a new version 2.3.5.

UPDATE 01.08.2025

Another patch, v0.50.2 was released.

This patch includes the following bug fix:

UPDATE

Meanwhile, two small bugfix releases (0.9.1 and 0.9.2) have also been published.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.49.0).

Sniffnet, an application to comfortably monitor your Internet traffic, has a new release.

Kali Linux has been released in version 2025.2.

The summary of the changelog since the 2025.1a release from March is:

UPDATE

v0.8.5 was now also released.

This release fixes a bug in nk3 secrets when handling base32 secrets if the length is a multiple of 8.

Steve McMichael from the the Simply Cyber Academy has released an Open Source CSF Profile Assessment Database.

UPDATE

Short after, version 0.48.1 has been released.

A new version 0.8.0 of Pynitrokey, the Python client for Nitrokey devices, has been released.

Kali Linux has been released in version 2025.1a.

The summary of the changelog since the 2024.4 release from December is:

Update: v0.47.1 has been released short after.

This is a patch release to fix an issue where users could not connect to remote Caido instances.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.47.0).

A new version 0.7.4 of Pynitrokey, the Python client for Nitrokey devices, has been released.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has just released their latest version (0.46.0).

RustScan, the modern and fast port scanner, has just been released in version 2.4.1.

A security update for the firmware of the Nitrokey 3 has been released: version 1.8.1.

Caido, a growing alternative to Burp Suite or OWASP Zap written completly in Rust, has now released their latest version (0.45.0).

UPDATE

Short after, Pynitrokey 0.7.3 was released to address a problem with older (<= 3.11) Python versions.

The latest version (1.3.2) of Sniffnet adds some more features and improvements:

Kali Linux has been released in version 2024.4.

The summary of the changelog since the 2024.3 release from September is:

The firmware of the Nitrokey 3 has been updated to version 1.8.0. Also a new version 0.7.1 of Pynitrokey has been released.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.7.0.

The new version 2.3.3 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available.

Caido, a growing alternative to Burp Suite or OWASP Zap, has now released their latest version (0.43.1).

The new version 2.3.2 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.5.0.

Kali Linux has been released in version 2024.3.

The summary of the changelog since the 2024.2 release from June is:

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.50.

The latest version (1.3.1) of Sniffnet has some more improvements:

The new version 2.3.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.48.

The new firmware version 1.7.2 for the Nitrokey 3 has been released and is now officially available.

Kali Linux has been released in version 2024.2.

The summary of the changelog since the 2024.1 release from February is:

The new version 1.7.0 of the Nitrokey 3 firmware and the new version 2.3.0 of the Nitrokey-app2 have been released and are now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.47.

The latest version (1.3.0) of Sniffnet has a lot of bugfixes and new features:

If you want to experiment and/or develop locally with/for AI, check out these tools:

Here you’ll find recommended Tools (online/offline) and Hardware.

This collection is not complete and in no special order. It will get updated along my way, for sure.

HumbleBundle has released a new AI-focused bundle: the Humble Tech Book Bundle: The Claude Code Mastery Bundle by Zenva featuring (for 22,72€) 8 books in PDF and ePub format published by Zenva.

If you want to experiment and/or develop locally with/for AI, check out these tools:

AI is undoubtedly the biggest disruptive technology that society has experienced to date.

HumbleBundle has released a new AI-focused bundle: the Humble Tech Book Bundle: The Claude Code Mastery Bundle by Zenva featuring (for 22,72€) 8 books in PDF and ePub format published by Zenva.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Ethical Hacking and Cyber Defense by Packt featuring (in the highest tier for 16,77€) 21 books in PDF and ePub format published by Packt.

HumbleBundle has released another Cybersecurity-related book bundle called Humble Tech Book Bundle: Cybersecurity by Wiley including real classic books from Bruce Schneier and Kevin Mitnick.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Hacking 2025 by No Starch featuring (in the highest tier for 33,36 €) 18 books in PDF, ePub and mobi format.

As you may already know, October is Cybersecurity Awareness Month!

HumbleBundle released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Security by APress featuring (in the highest tier for 21,32€) 25 books in ePUB format published by APress.

HumbleBundle have released another cybersecurity related bundle: the Humble Tech Book Bundle: The Pentesting and Hacking Toolkit by Packt.

Are you currently studiying for some certification? Then the the Humble Tech Book Bundle: Networking and Security Cert Prep by Pearson IT Certification and Exam Cram might be what you’re looking for. It features (in the highest tier for 23,15€) 16 books in PDF format published by Pearson.

HumbleBundle has another offer on an Cybersecurity related book bundle: the Humble Tech Book Bundle: Ultimate Cybersecurity Career by Packt.

Do you don’t like reading about cyber security topics?

Then maybe the Humble Audio Book Bundle: Cybersecurity and Forensics by Packt is for you!

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Hacking 2024 by No Starch featuring (in the highest tier for 34,57 €) 18 books in PDF, ePub and mobi format.

HumbleBundle has released another Cybersecurity-related bundle: the Cybersecurity Month Mega Bundle from O'Reilly featuring (in the highest tier for 22,83€) 22 books in PDF and ePub format published by O’Reilly.

HumbleBundle has released another Cybersecurity-related bundle: the Humble Tech Book Bundle: Threat Intelligence by Packt featuring (in the highest tier for 16,57€) 17 books in PDF and ePub format published by Packt.

Only short after the last bundle, yet another book bundle covering certifications has been released by HumbleBundle: the Humble Tech Book Bundle: Sybex CompTIA and more by Wiley.

If you are planning to get certified (like me :)), you may find the the Humble Tech Book Bundle: Get Certified! by Packt from HumbleBundle useful.

Another Cybersecurity-related bundle by HumbleBundle is now available: the Humble Tech Book Bundle: Cybersecurity by Pearson featuring (in the highest tier for 23,19€) 18 books in PDF format published by Pearson.

Here you’ll find recommended Online-References, Cheatsheets and Books.

This collection is not complete and in no special order. It will get updated along my way, for sure.

The new version 2.7.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

The new version 2.7.0 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

The updated version 2.6.0 of the Nitrokey-app2, the graphical application for managing and using Nitrokey 3 devices, has now been officially released.

UPDATE #2

Another bugfix release (v2.5.2) has been released.

This bugfix release fixes the PIN input dialogs being disabled.

The latest stable release (012) of Momentum, a custom firmware for the Flipper Zero, is now available.

The graphical application to manage and use Nitrokey 3 devices called Nitrokey-app2, is now available in a new version 2.4.3.

A small update (version 1.8.3) of the Nitrokey 3 firmware has been released.

The final version 1.8.2 of the Nitrokey 3 firmware has been released.

UPDATE

v2.4.1 was released shortly after. Now also binaries for Windows and macOS are available.

Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available in a new version 2.3.5.

Today, the latest stable version 011 of the Flipper Zero custom firmware called Momentum has been released.

If you own a Flipper Zero, you should already know about the Momentum Firmware. The team behind this custom firmware has now released the latest stable firmware release 010.

A security update for the firmware of the Nitrokey 3 has been released: version 1.8.1.

The team behind the Momentum Firmware for the Flipper Zero have released the latest stable firmware release 009.

The firmware of the Nitrokey 3 has been updated to version 1.8.0. Also a new version 0.7.1 of Pynitrokey has been released.

The new version 2.3.3 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available.

The team behind the Momentum Firmware for the Flipper Zero have released the latest firmware release 008.

The new version 2.3.2 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Since the Xtreme Firmware for the Flipper Zero went into the void at the end of July 2024, I was looking for a replacement.

The new version 2.3.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

The new firmware version 1.7.2 for the Nitrokey 3 has been released and is now officially available.

The new version 1.7.0 of the Nitrokey 3 firmware and the new version 2.3.0 of the Nitrokey-app2 have been released and are now officially available.

Here you’ll find recommended Tools (online/offline) and Hardware.

This collection is not complete and in no special order. It will get updated along my way, for sure.

The new version 2.7.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

The new version 2.7.0 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

An updated release of Pynitrokey, the Python client for Nitrokey devices, is now available: version 0.12.0.

The updated version 2.6.0 of the Nitrokey-app2, the graphical application for managing and using Nitrokey 3 devices, has now been officially released.

UPDATE #2

Another bugfix release (v2.5.2) has been released.

This bugfix release fixes the PIN input dialogs being disabled.

A new update for Pynitrokey, the Python client for Nitrokey devices, is now available: version 0.11.3.

The graphical application to manage and use Nitrokey 3 devices called Nitrokey-app2, is now available in a new version 2.4.3.

UPDATE

Pynitrokey version 0.11.2 has also been released.

Changelog:

Allow cffi v2 dependency
Allow cryptography v46
PIV: Fix 9C key generation
Update pyscard in lock file
Add support for unauthenticated NetHSM shutdown Handle missing packages when logging package versions and release v0.11.1

---

UPDATE

A small update (version 1.8.3) of the Nitrokey 3 firmware has been released.

The final version 1.8.2 of the Nitrokey 3 firmware has been released.

UPDATE

v2.4.1 was released shortly after. Now also binaries for Windows and macOS are available.

Another update to Pynitrokey, the Python client for Nitrokey devices, has been released: version 0.10.0.

Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available in a new version 2.3.5.

UPDATE

Meanwhile, two small bugfix releases (0.9.1 and 0.9.2) have also been published.

UPDATE

v0.8.5 was now also released.

This release fixes a bug in nk3 secrets when handling base32 secrets if the length is a multiple of 8.

A new version 0.8.0 of Pynitrokey, the Python client for Nitrokey devices, has been released.

A new version 0.7.4 of Pynitrokey, the Python client for Nitrokey devices, has been released.

A security update for the firmware of the Nitrokey 3 has been released: version 1.8.1.

UPDATE

Short after, Pynitrokey 0.7.3 was released to address a problem with older (<= 3.11) Python versions.

The firmware of the Nitrokey 3 has been updated to version 1.8.0. Also a new version 0.7.1 of Pynitrokey has been released.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.7.0.

The new version 2.3.3 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now available.

The new version 2.3.2 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.5.0.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.50.

The new version 2.3.1 of the Nitrokey-app2, the graphical application to manage and use Nitrokey 3 devices, is now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.48.

The new firmware version 1.7.2 for the Nitrokey 3 has been released and is now officially available.

The new version 1.7.0 of the Nitrokey 3 firmware and the new version 2.3.0 of the Nitrokey-app2 have been released and are now officially available.

Pynitrokey, the Python client for Nitrokey devices, has been released in version 0.4.47.

The 52nd Cologne OWASP Stammtisch takes place on Thursday, May 21, 2026 at REWE Digital, Schanzenstr. 6-20, Kupferwerk 2.20, 1st Floor, Cologne. Doors open at 19:00, talk starts at 19:30.

Tyler Ramsbey, a professional Pentester, has released his new (paid) course on Foundations of Web App Pentesting including 80+ videos, 30+ custom labs, and 160 hours of lab time.

Tyler Ramsbey, a professional Pentester, has released his new (paid) course on Sliver C2: Pentesting and Evasion including 80 hours of fully hosted lab time.

Tyler Ramsbey, a professional Pentester, has released his own (paid) Hands-On Hacking Labs platform including the first AD Challenge called BuildingMagic.

Over on the Simply Cyber Academy a new learning course was released: OSINT for Pentesters by Mishaal Khan.

Tyler Ramsbey, a professional Pentester, has released another learning course on the Simply Cyber Academy: Hands-On Phishing.

The Simply Cyber Academy has just released another completly free course: Hacking Active Directory by Ryan Yager.

Over on the Simply Cyber Academy you can now sign up completly free for the course How to Break into GRC: Mindset, Methods, Skills.

Tyler Ramsbey, a professional Pentester, has released a free learning course on the Simply Cyber Academy: Introduction to Hacking Methodology.

Here are some of my resources, which help(ed) me along my way.
Please check back regularly, because these are going to be updated often.

I’ve finished the Advent of Cyber 2025 at TryHackMe!

Again it was a lot of fun, and I have deepened my knowledge in some subjects.

Yes, it’s this time of year again…

The TryHackMe Recap for 2025 is now live.

If you haven’t noticed already: the yearly hacking challenge over at TryHackMe has begun…

I’m making good progress, and have now also completed the Web Fundamentals Learning Path at TryHackMe!

I’ve completed the Cyber Security 101 Learning Path at TryHackMe!

I’ve finished the Advent of Cyber 2024 at TryHackMe!

It was a lot of fun, and I’ve learned a lot of new topics.

If you -like me- enjoy learning on TryHackMe, then you may already have noticed a new information on your dashboard:

The yearly hacking challenge over at TryHackMe is about to begin…

After one the latest updates of Kali Linux (rolling release), I’ve encountered that my Xfce Desktop was displaying something weird in the menu:

I’m currently experimenting with Wazuh, an Open Source Security Platform featuring XDR and SIEM protection, in my homelab.

If you’ve updated your Kali Linux including the PostgreSQL database and/or some tools like OpenVAS, you might get some warnings when starting up your tools (I’m using Kali with german language):

If you want to create a new pair of a private and public key for signing and encrypting messages with Thunderbird using GPG (and not using the Thunderbird included way), follow these steps:

I’m currently doing the Practical Ethical Hacking Course on the TCM Security Academy.

When you manage to get access to a system by the means of a reverse shell, chances are that you want to stabilize your new shell to have a real terminal (tty).

Follow these steps to upgrade your existing Postgresql 16 cluster to version 17.

To create a reverse shell for Windows using Metasploit and msfvenom, do this:

After one the latest updates of Kali Linux (rolling release), I’ve encountered that my Xfce Desktop was displaying something weird in the menu:

After one the latest updates of Kali Linux (rolling release), I’ve encountered that my Xfce Desktop was displaying something weird in the menu:

I’m currently experimenting with Wazuh, an Open Source Security Platform featuring XDR and SIEM protection, in my homelab.

If you’ve updated your Kali Linux including the PostgreSQL database and/or some tools like OpenVAS, you might get some warnings when starting up your tools (I’m using Kali with german language):

Follow these steps to upgrade your existing Postgresql 16 cluster to version 17.

Steve McMichael from the the Simply Cyber Academy has released an Open Source CSF Profile Assessment Database.

Why Information Security is the Better Option: A Comprehensive Approach to Protecting Your Digital Assets

What is the difference between cyber security and information security?

Steve McMichael from the the Simply Cyber Academy has released an Open Source CSF Profile Assessment Database.

Over on the Simply Cyber Academy you can now sign up completly free for the course How to Break into GRC: Mindset, Methods, Skills.

Steve McMichael from the the Simply Cyber Academy has released an Open Source CSF Profile Assessment Database.

Why Information Security is the Better Option: A Comprehensive Approach to Protecting Your Digital Assets

What is the difference between cyber security and information security?

The Simply Cyber Academy has just released another completly free course: Hacking Active Directory by Ryan Yager.

This is a quick and dirty writeup for the Practical Ethical Hacking Course capstone machine called “Blue” on the TCM Security Academy.

I’m currently doing the Practical Ethical Hacking Course on the TCM Security Academy.

This is a quick and dirty writeup for the Practical Ethical Hacking Course capstone machine called “Blue” on the TCM Security Academy.

I’m currently doing the Practical Ethical Hacking Course on the TCM Security Academy.

This is a quick and dirty writeup for the Practical Ethical Hacking Course capstone machine called “Blue” on the TCM Security Academy.

If you want to create a new pair of a private and public key for signing and encrypting messages with Thunderbird using GPG (and not using the Thunderbird included way), follow these steps:

If you want to create a new pair of a private and public key for signing and encrypting messages with Thunderbird using GPG (and not using the Thunderbird included way), follow these steps:

When you manage to get access to a system by the means of a reverse shell, chances are that you want to stabilize your new shell to have a real terminal (tty).

To create a reverse shell for Windows using Metasploit and msfvenom, do this:

To create a reverse shell for Windows using Metasploit and msfvenom, do this:

To create a reverse shell for Windows using Metasploit and msfvenom, do this:

Currently, HumbleBundle offers the Cyber Security: Zero to Hero-Bundle featuring a lot of cyber security related video series.

Here you’ll find recommended Videos, Podcasts and other media.

This collection is not complete and in no special order. It will get updated along my way, for sure.

It begins

As a Linux Sysadmin with over 20 years and also data protection officer with 5 years of work experience, my interest for cyber/information security began to grow in the last year.

Hi, I am Manuel Schömburg (SecBurg)!

About this blog

• documenting my way to information security, (ethical) hacking and defense
• news, write-ups, tipps and experiences gathered along the way
• maybe also some topics about AI (hyper, hyper!)
• most header images are AI generated
• website is generated using Hugo, theme is a customized Ananke

About me

• TÜV-certified data protection officer with > 5 years of work experience
• senior linux admin and senior network & systems engineer with > 20 years of work experience
• member of BvD and OWASP
• worked for public and private sectors on different scale projects
• now expanding my horizon to information security, (ethical) hacking and defense

Oh, and I do own a Flipper Zero. :-)

Some certifications already gained along the way.

(click to reveal)

---

TryHackMe Advent of Cyber 2025 certificate

TryHackMe Web Fundamentals certificate

TryHackMe Cyber Security 101 certificate

TryHackMe Advent of Cyber 2024 certificate

TryHackMe Junior Penetration Tester certificate

TryHackMe Pre-Security certificate

TryHackMe Intro to Cybersecurity certificate

---

TÜV Data Protection Officer certificate

---

… more to come… ;-)

Some certifications already gained along the way.

(click to reveal)

---

TryHackMe Advent of Cyber 2025 certificate

TryHackMe Web Fundamentals certificate

TryHackMe Cyber Security 101 certificate

TryHackMe Advent of Cyber 2024 certificate

TryHackMe Junior Penetration Tester certificate

TryHackMe Pre-Security certificate

TryHackMe Intro to Cybersecurity certificate

---

TÜV Data Protection Officer certificate

---

… more to come… ;-)

Here you’ll find recommended Online-References, Cheatsheets and Books.

This collection is not complete and in no special order. It will get updated along my way, for sure.

Here are some of my resources, which help(ed) me along my way.
Please check back regularly, because these are going to be updated often.

Here you’ll find recommended Videos, Podcasts and other media.

This collection is not complete and in no special order. It will get updated along my way, for sure.

Here you’ll find recommended Online-References, Cheatsheets and Books.

This collection is not complete and in no special order. It will get updated along my way, for sure.

Hi, I am Manuel Schömburg (SecBurg)!

About this blog

• documenting my way to information security, (ethical) hacking and defense
• news, write-ups, tipps and experiences gathered along the way
• maybe also some topics about AI (hyper, hyper!)
• most header images are AI generated
• website is generated using Hugo, theme is a customized Ananke

About me

• TÜV-certified data protection officer with > 5 years of work experience
• senior linux admin and senior network & systems engineer with > 20 years of work experience
• member of BvD and OWASP
• worked for public and private sectors on different scale projects
• now expanding my horizon to information security, (ethical) hacking and defense

Oh, and I do own a Flipper Zero. :-)

Some certifications already gained along the way.

(click to reveal)

---

TryHackMe Advent of Cyber 2025 certificate

TryHackMe Web Fundamentals certificate

TryHackMe Cyber Security 101 certificate

TryHackMe Advent of Cyber 2024 certificate

TryHackMe Junior Penetration Tester certificate

TryHackMe Pre-Security certificate

TryHackMe Intro to Cybersecurity certificate

---

TÜV Data Protection Officer certificate

---

… more to come… ;-)

Here you’ll find recommended Learning & Practicing- and News-Sites.

This collection is not complete and in no special order. It will get updated along my way, for sure.