Cybersecurity

Minutes will not be published, and MPs still have no answer on the group's budget or how its members were chosen

When a CI pipeline failed at 02:13 AM on March 3, we discovered that 412 distinct API tokens had been...

Why doing both is not confusion — it’s your biggest competitive edge Continue reading on Medium »

Currently doing a three year computer science bachelors with a major in cybersecurity and I’ve been looking into HackTheBox and TryHackMe for some extra work du

reCAPTCHA v3 doesn't show a puzzle — it scores your whole session 0.0–1.0. Here's what actually drives a low score (IP, fingerprint, behavior) and how to raise

In today’s digital economy, data has become one of the most valuable assets for any organization. From customer records and financial… Continue reading on Mediu

What spies, FBI agents, and your nosy neighbor all have in common — and how you can join the club for $0. Continue reading on Medium »

Welcome back — this is Part IV and the final piece of the series. Continue reading on MeetCyber »

I thought my code was secure. An AI security review disagreed — and it was right. Continue reading on Medium »

Most apps think they are secure because they have login pages. But authentication is only the first...

Most people think penetration testing starts with running tools — Nmap, Metasploit, Burp Suite. But...

Stop Uploading Your Sensitive Data to Sketchy Websites Just to Trim a File If you have...

A monorepo can look like one repository, but security teams should treat it as many applications...

Someone on your leadership team asked a reasonable question: should we adopt passkeys? You searched...

Most people who study networking learn TCP from diagrams and textbooks. But there is a real...

The digital world is growing rapidly, and so are cyber threats. From multinational companies to government organizations and startups… Continue reading on Mediu

A few months ago, one of my friends was looking for a new pair of wireless earbuds. He found a website offering a huge discount — almost… Continue reading on Me

Set up a SOC lab with Elasticsearch, Kibana, and Fleet Server. Continue reading on Medium »

Most developers think password hashing is about authentication. It's not. Authentication is just a...

Due to increasing complexity in cyber-attacks as well as regulatory changes, there is a growing importance attached to visibility as well… Continue reading on M

Small businesses rarely fail because attackers outsmart their technology. They fail because their environments expand faster than their… Continue reading on Med

Static analysis used to mean a linter nobody read. In banking, it now decides who gets to touch the mainframe next.

Went down the quishing rabbit hole after a couple of incident reports in our sector flagged QR-based credential harvesting, and now I'm auditing our own QR usag

Think quantum-proofing your applications requires a Ph.D. in advanced lattice mathematics? Think again.

The Floppy Disk in the Mailbox Continue reading on Medium »

An expanded version of my keynote at ISC.AI 2026 in Beijing. The framework and the tool are open — take them, break them, and send me what… Continue reading on

Series: Web3 Security Zero se Advance ️ | Article #20 By HackerMD | 32 min read Continue reading on Medium »

A week ago, I finished the entire XSS Apprentice track on PortSwigger, nine labs of finding sinks and breaking out of contexts. Continue reading on Medium »

The first two clickjacking labs were about framing and positioning. This third one adds a defense on top, a frame buster script meant to… Continue reading on Me

Hey everyone, I’m stuck on a weird Fusion SOAR issue. I have three separate workflows set up for Identity , Endpoint , and NG-SIEM . When I use Test Execution w

Hi everyone, I recently got a free voucher for the Microsoft Certified: Security Operations Analyst Associate exam, but I have to take it on 28/06/2026 . The pr

Stop treating security training as a yearly chore. Learn how to use MCP to bridge the gap between vulnerabilities and developer education in real-time.

Shri Venkateshwara University and UP Police Amroha concluded the 12 days Cyber Security National Workshop 2026 with full fanfare and… Continue reading on Medium

Executive Summary This writeup documents the complete exploitation chain for the Nexus...

arXiv:2606.25200v1 Announce Type: cross Abstract: The accelerated digitalization of renewable energy smart grids through IoT sensors, AMI, and SCADA systems has

arXiv:2601.23147v2 Announce Type: replace-cross Abstract: The integrity of time in distributed Internet of Things (IoT) devices is crucial for reliable operatio

There's a move almost every trust system makes, and it's quietly broken. You have a thing you want...

A real story of a small business that lost thousands in days — and the complete playbook to recover and protect your site. Continue reading on Medium »

Di era digital yang semakin berkembang, pengguna memiliki banyak pilihan platform online untuk berbagai kebutuhan. Namun, tidak semua… Continue reading on Mediu

 Knowledge should be gated by curiosity, not paywalls. If you don’t have a Medium subscription, use the free link below and enjoy the… Continue reading on Medi

In June 2026, the FortiBleed campaign came to light after a dataset containing a large volume of login information associated with… Continue reading on OSINT Te

Transforming IP addresses into actionable context for auditing, analytics, and security Continue reading on Medium »

Look, most VPN comparisons are mind-numbingly boring—they just list features and call it a day. But when you're actually running a business, choosing the right

Want to know the dirty secret of VPN comparisons? Most of them are written by people who never actually paid for the product. I've tested more VPNs than I can c

Youtube link: https://youtu.be/sDU4JxlWrnY Continue reading on Medium »

An attacker force-pushed a malicious composite action into codfish/semantic-release-action and moved fifteen published tags to that commit, exposing GitHub Acti

Ex employee here and I’m hearing up to 30% of Snyk’s team was let go. All teams impacted. Leadership says it’s to pivot to AI security. This comes a day after t

Continue reading on Medium »