Cybersecurity

Last week an anonymous GitHub account called bikini pushed a repository named exploitarium and, in...

Most wrong answers on Security+ and Network+ aren't knowledge gaps. You read the objective, you...

What We Know: The Basics of the Breach Polymarket, one of the largest prediction market...

The previous post was about scanning your diff for secrets before it leaves your machine. This one is...

Part of the H0: Hack the Zero Stack submission. See the project on Devpost. Every hackathon...

I indexed the WordPress.org plugin directory and measured how well it is maintained. The headline: of...

Most phishing tools still rely on sending your data to the cloud. That means your...

The previous parts of this series were written from a comfortable distance. I read the Trend Micro...

Undisclosed 0-Days, OpenZL for Zero-Trust, and Reddit's Anti-Spam Architecture ...

Dial DNSBL checks, header-anomaly detection, and spam sensitivity on an Agent Account policy — so filtering fits each class of agent instead of one global defau

The padlock icon in your browser's address bar does not mean your card is safe. That's the assumption...

Back in February I helped build a thing called Sentinel Eye for the HyperSpace Innovation...

When we use applications like Gmail, Netflix, or online banking, we rarely think about the security...

Today I'm excited to announce the first stable release of Siyarix (v1.0.0)! Siyarix is an...

Free account → full data breach → 1,630 private documents → CEO account takeover. All before my coffee got cold. Continue reading on Medium »

Free account → full data breach → 1,630 private documents → CEO account takeover. All before my coffee got cold. Continue reading on Medium »

The Digital Assembly Line Continue reading on Medium »

The FBI and CISA have warned that Russian intelligence hackers are now targeting Signal users’ backup recovery keys, an escalation of a phishing campaign that h

Last week I gave a robot policy one extra sentence. It dropped its real task and did what I told it instead. Same setup without the… Continue reading on Medium

Something is starting to crack inside a lot of security teams right now. Continue reading on Medium »

What if your code passed review, your git history was spotless, and your SAST scan was green — and the binary you shipped was still… Continue reading on Medium

After I got targeted by a fake-job-interview repo designed to steal my keys, I built a scanner that...

Chaos engineering was born at Netflix as a way to prove that distributed systems could survive failure, and it is now being adapted to… Continue reading on Medi

After studying enterprise security trends, I realized AI is no longer just helping developers — it is becoming part of the security team. Continue reading on Me

A few months ago, I was contacted by a small business owner whose WordPress site had been hacked. Continue reading on Medium »

"To defend a system, you must first think like the attacker." I'll tell you this: the browser is...

When most people think about anti-cheat, they think about kernel drivers, signature scanning, or...

For more than two decades, when your phone introduced itself to a cell tower it could be made to...

Stop context-switching between security dashboards and your IDE. Learn how using an MCP server for Contrast Security can transform vulnerability triage from a m

What Happened: ShinyHunters Found a Door Oracle Left Open ShinyHunters, one of the most...

What Actually Happened: 73 Signed Packages, One Nasty Surprise Late last week, 73 open...

Introduction Security issues in cloud infrastructure often start as small configuration...

This research was conducted as a part of cybersecurity internship at EyeQ Dot Net Private Limited | Cyber Security Continue reading on Medium »

The digital economy has created unprecedented opportunities for businesses to innovate and expand their operations. At the same time… Continue reading on Medium

A simple cross-dataset experiment challenged everything I thought I knew about machine learning for intrusion detection. Continue reading on Medium »

Platform: Microsoft Purview (M365 E5) Continue reading on Medium »

Why Security Professionals Should Understand Modern C2 Frameworks Continue reading on Medium »

I built Grid Audit, a tool that reviews Midnight code and then lets you certify that review on-chain....

The cyber threat landscape of 2026 has exposed a fundamental flaw in enterprise security: companies are defending their perimeters while… Continue reading on Me

Every day, millions of people create new online accounts. Whether you’re signing up for a new app, testing a website, or downloading… Continue reading on Medium

Aprende a identificar, explotar y mitigar vulnerabilidades DOM (XSS, CSPP y DOM Clobbering) con metodologías avanzadas de Bug Bounty. Continue reading on Medium

🛡️ Your Computer Got Infected — Now What? A Developer's Survival Guide to Malware...

Listen up. If you’re still playing by the rules Apple wrote for you, you aren’t testing security....

Modern threat actors have learned to exploit privacy proxy services and GDPR redactions to conceal their corporate footprints. Continue reading on Medium »

Smarter AI pushes forward at full speed — yet slipping personal data keeps pace, sprinting right beside it. Continue reading on StartupInsider »

Most cloud platforms that need access to your infrastructure start with the same onboarding step:...

I spend part of my week watching what apps say to the internet, and most of them say more than they need to. A PDF viewer that calls a… Continue reading on Medi

Most apps encrypt data in transit, forget it at rest, and never even think about data in use. Here’s where your secrets quietly walk out… Continue reading on Le