Cybersecurity

A few months ago I found myself auditing a side project and noticed something uncomfortable: I was...

Philippe Laulheret, a Senior Vulnerability Researcher at Cisco Talos, discusses the intricacies of...

Long-form (~1500 words). Walk through the five attack categories mcp-security-scan checks (credential...

Frustration Meets Function Continue reading on Medium »

How to run continuous, AI-powered security audits on your codebase — routed through a local proxy that picks the cheapest viable model for each file. Most secur

This Is Not an Anomaly The LiteLLM incident is part of an accelerating pattern: 454,000+ new malicious packages in open-source registries in 2025 Malicious pack

Open Source Intelligence: Tools and Techniques for 2026 Open Source Intelligence (OSINT)...

Why the “invisible cloud” is actually a massive transportation hub, and what it teaches us about boundaries. Continue reading on Medium »

A lot of people rush through alerts like this and immediately assume the account was compromised just because the login came from another… Continue reading on M

Sen tarayıcı üzerinden bir siteye gitmek istediğinde tren hangi duraklarda geçiyor biliyor musun? Continue reading on Medium »

A practical account of using NIST CSF to assess and score 50+ business units across finance, insurance, technology, and other verticals… Continue reading on Med

Il y a quelques années, un deepfake se repérait assez facilement. Un visage qui bougeait de façon bizarre, un son légèrement décalé, une… Continue reading on Me

Quantum, AI, and the Window That’s Already Closing Continue reading on Medium »

Input 1 into the text box and submit. Code is suppose to print ID, first name and surname to the screen. Continue reading on Medium »

In a previous essay, I wrote about how companies, especially in the United States, seem increasingly willing to cut people because of AI. Continue reading on Me

Cybercrime is increasing rapidly as organizations continue relying on digital systems, online services, and cloud technologies. Businesses now face cyber threat

mTLS (Mutual TLS) Rehberi: Nedir, Nasıl Çalışır ve Sahada Nerede Kırılır? Continue reading on Medium »

A lot of developers still assume one thing about modern package security: Continue reading on Medium »

A lot of developers still assume one thing about modern package security: Continue reading on Medium »

There was a pattern we kept seeing that genuinely bothered us. A startup would get to Series A, or...

A note before we begin: This is my first article on Medium. I am a cybersecurity professional currently in active training at a… Continue reading on Medium »

A fake Hugging Face repository called “Open-OSS/privacy-filter” recently appeared, designed to impersonate an OpenAI-style privacy… Continue reading on Medium »

For two decades the database has been able to outsource trust to the application layer. The app...

How the TanStack npm compromise fits into the broader Mini Shai-Hulud campaign across npm, PyPI, GitHub Actions, IDE hooks, and CI/CD secrets.

Smart contracts are immutable once deployed. A single bug can drain millions in minutes. This article builds a practical taxonomy of the most dangerous vulnerab

Today, we are taking on Devarea, a machine that tests your ability to string together multiple misconfigurations. We’ll start by… Continue reading on Medium »

Milyonlarca kez indirilen güvenilir altyapılar nasıl birer silaha dönüştü? Yazılım tedarik zinciri krizine ve siber güvenliğin yeni yüzüne… Continue reading on

1. Introduction and Scope Continue reading on Medium »

Intro: Seeing Your Internet-Facing Risk Before Attackers Do Continue reading on Medium »

Why This Conversation Can’t Wait Anymore Continue reading on Medium »

The promise of the digital age was built on a foundation of seamless connectivity and the ironclad security of personal data. Continue reading on Medium »

In the React2Shell exploitation, we can abuse a deserialization vulnerability in React Server...

If you are evaluating RBAC tools right now, you already know the hard part is not finding "features."...

Online privacy has become a major concern in today’s digital world. Many people use VPNs to protect their internet activity and hide their… Continue reading on

When I first started learning mobile application security testing, I honestly thought installing a few tools would be enough. I quickly… Continue reading on Med

Most people beginning their cybersecurity journey hear the same advice: jump straight into tools, labs, and exploits. Install Kali Linux… Continue reading on Me

Microsoft starts expiring critical Secure Boot certificates in just 2 weeks.

En Chile, donde ciberataques subieron 35% en 2025 (Cybersecurity Ventures), el soporte informático profesional es clave para pymes. Este… Continue reading on Me

What does Mythos, a powerful cyber-weapon disguised as responsible AI stewardship, mean for cybersecurity professionals? Continue reading on ILLUMINATION »

Dunia keamanan siber tidak hanya soal membangun benteng yang tinggi melalui enkripsi atau kebijakan Zero Trust yang ketat. Memiliki teori… Continue reading on M

In the era of AI bots crawling the internet we must ensure the protection of our software against masquerading and spoofing. Use SMS or… Continue reading on Med

Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specific

Understanding how secure systems verify identity first and then control access to actions and resources  Continue reading on CodeX »

Understanding how secure systems verify identity first and then control access to actions and resources  Continue reading on CodeX »

Welcome to the fourth article in the THREATRADAR series. We recommend reading Part 1 Design and Implementation of THREATRADAR: Open-Source… Continue reading on

Two samples sitting in my honeypot had 55+ detection flags on VirusTotal but no threat label. No family name, no classification. Just… Continue reading on Mediu

Learn the basics of NoSQL injection, attack vectors in MongoDB, and advanced exploitation and defense strategies. Continue reading on Medium »

Zero Trust, MFA, cloud security the conversation never stops. But underneath it all, two protocols from the 1990s still decide who gets in… Continue reading on