Cybersecurity

Proton warns that millions of smartphone users have now installed VPNs that secretly track their phone and location. And many of those VPNs have direct links to

Earlier this month I clicked a button labeled Freeze, and a validator told me my artifact was...

Learn why SSL certificate warnings appear, how they affect customer trust and SEO, and how to fix common HTTPS security issues. Continue reading on Medium »

Typosquatting is a cybersecurity technique where attackers register domains that look very similar to legitimate websites Continue reading on Medium »

Typosquatting is a cybersecurity technique where attackers register domains that look very similar to legitimate websites Continue reading on Medium »

Typosquatting is a cybersecurity technique where attackers register domains that look very similar to legitimate websites Continue reading on Medium »

Typosquatting is a cybersecurity technique where attackers register domains that look very similar to legitimate websites Continue reading on Medium »

On 4 August 2026, a self-propagating worm called ChainDrop tore through npm. BleepingComputer reported more than 1,300 compromised packages with about two billi

This blog was originally published by Brian Tant on the Raxis blog January 21, 2026 GitHub has...

Automation doesn't break when you write it. It breaks in production, weeks later, quietly — and my...

Microsoft has spent years turning Windows from a traditional desktop operating system into a deeply connected cloud platform. Continue reading on Medium »

Suppose you get an email from your bank stating that your account will be closed within 24 hours unless you verify your details. Being… Continue reading on Medi

I wanted to build a SOC home lab where I could do more than follow tutorials. Continue reading on System Weakness »

Video chat failed the safety test. Here is why ephemeral, AI-moderated text platforms are the new standard for meeting strangers online. Continue reading on Med

Designing and implementing a system requires knowing what needs protection, who might threaten it, and how severe that threat could be… Continue reading on Medi

The agent needs the network to install its dependencies. Then it runs code a model wrote, in the same box, with the same unrestricted… Continue reading on Data

I have no doubts you’ve heard: autonomous AI cybersecurity threats have arrived. Continue reading on Medium »

Ever wonder how a call reaches your phone no matter where you are? Or how your carrier magically finds you the second you step off a plane? Continue reading on

Detect exposed APIs, sensitive data, and risky disclosures before they turn into a breach Continue reading on Medium »

First cloud-focused engagement, and the plan going in looked like every internal AD assessment before...

After an affair with a fellow police officer ended, a Georgia cop used Flock to track her movements—and those of a man whose vehicle often showed up near hers,

I spent an afternoon convinced my detector was broken. I was building Cencurity, a local gateway...

Not a Conversation, a New Case Continue reading on Medium »

Apple ranked deterministic controls above probabilistic ones at WWDC26. I wanted the stronger version, so I built it: a 12-tool… Continue reading on Medium »

Apple ranked deterministic controls above probabilistic ones at WWDC26. I wanted the stronger version, so I built it: a 12-tool… Continue reading on Medium »

When I started exploring cybersecurity, I quickly realized that before learning about attacks, tools, or security technologies, I needed… Continue reading on Me

The Keychain accessibility attribute decides whether your token leaves the device. Most Flutter apps never set it, and the default changed… Continue reading on

You don’t need to stop sharing sensitive information. You just need to stop sharing it without control. Think about the last time you sent a confidential file.

For the longest time, I thought remote access was pretty straightforward. Someone is working from home. Someone else is sitting in an… Continue reading on Mediu

If you have been following this series, you already know that injection vulnerabilities happen when an application trusts user input… Continue reading on Medium

Every organization creates identities for a reason. Continue reading on Medium »

Conhecido como JSON Web Token (JWT), ele está presente em muitas aplicações web modernas. Quando começamos a estudar autenticação, é comum… Continue reading on

Most incident response plans were written for a world of servers, databases, and predictable failure modes. Continue reading on Medium »

arrayref 0.3.10 did not need a build script. A yanked-version warning did the rest. Continue reading on Medium »

arrayref 0.3.10 did not need a build script. A yanked-version warning did the rest. Continue reading on Medium »

Four whiteboard tickets from a 2am NOC. This is Azure — NSG, VNet peering, hub-spoke, and an on-prem firewall into a Palo Alto VM-Series… Continue reading on Me

An Architecture Blueprint for Local SSL Interception, Telemetry GUIs, and Zero-Cloud-Cost ROI Reporting. Continue reading on Medium »

Now that the homelab foundation is complete, I have moved on to setting up an IDS (Intrusion Detection System) and assembling the pieces… Continue reading on Me

A JWT looks like gibberish until you decode it — three Base64URL segments separated by dots: header,...

I thought I was being clever. I was just being cheap. Continue reading on Medium »

I thought I was being clever. I was just being cheap. Continue reading on Medium »

Ever found a subdomain no one else has, just by reading a certificate log? You’re not alone — Certificate Transparency (CT) is the open… Continue reading on Med

Intro: This is my experience with lab Linux Fundamentals Part 3 in cyber security 101 room. Continue reading on Medium »

Translating Plain English to Advanced SPL Continue reading on Medium »

During a recent SOC operation involving an unauthorized malware drop on a privileged Linux server (/root), I built and validated an end to… Continue reading on

The PDF is only the beginning. Security depends on what the AI creates, who can access it, how long it survives, and whether deletion… Continue reading on Mediu

One AI and two trained eyes delved into the heavily padded leaks

Unfortunately, every connection represents another potential entry point for attackers.