Cybersecurity

The difference between assigning data ownership and actually making someone accountable. Continue reading on Medium »

Cybersecurity is no longer something that only big banks, government agencies, or large technology companies need to worry about. Continue reading on Medium »

There’s no bribe, no threat, no smoke-filled room. That’s exactly what makes the data-broker lobby’s capture of American privacy law so… Continue reading on Med

I built Shieldwise — an open-source privacy decision engine for UK GDPR Article 35 Continue reading on Medium »

When I first started learning about APIs, I thought of them mainly as the systems that allow applications to communicate. Continue reading on Medium »

A need for stricter disclosure timelines and real accountability for delayed notifications. Continue reading on Medium »

Just venting from LinkedIn BS and people promoting garbage. You know the companies I’m talking about. Especially in my domain of OT/ICS When the person warning

Hi, I’m just starting my cybersecurity career. I’ve only completed Cisco’s CCST, and I wanted to know what you’d recommend doing next. I was planning to go for

The industry didn't just lose money in May 2022. It lost permission to ask normal people to trust it with their savings.

On September 11, 2026, Revolut customers started receiving an email they’d never seen before: notice that their passport, their full… Continue reading on Medium

Deciding who gets less is the half that requires someone to say so on the record. Who is that person at your company, and when did they last write it down?

I work at a banking company that runs several different products and platforms for its applications — including mobile apps, web, and… Continue reading on Mediu

EDR protects endpoints, but modern threats target identity, email, and cloud. Learn why MSPs need MDR for broader protection. Continue reading on Medium »

How cyber attacks can move beyond digital screens and affect real-world infrastructure. Continue reading on Medium »

Let’s Connect | LinkedIn | YouTube | X | Instagram | TikTok Continue reading on Medium »

Anthropic and Google Independently Confirm AI Has Become the Attack Orchestrator, Cisco FMC Falls to Cyclops Blink and Qilin… Continue reading on TI Mindmap HUB

Privilege Escalation Through Client-Controlled Session State Continue reading on Medium »

A fun and full of learning static and dynamic analysis of a Nim-based data-stealing trojan. Continue reading on Medium »

In today’s fast-paced digital landscape, application performance, latency, and security are critical factors for any web platform or… Continue reading on Medium

How a seemingly simple upload validation flaw led to interactive access on an internal Linux host Continue reading on Medium »

National Institute of Standards and Technology (NIST) Incident Response Lifecycle, which is a framework for incident response consisting… Continue reading on Me

Can you train a cyberattack detector without ever showing it a real cyberattack? Continue reading on Medium »

In an AARP survey of U.S. adults 50 and older, worry about AI being used to crack passwords ranked first at 87% — ahead of deepfakes (85%)… Continue reading on

In an AARP survey of U.S. adults 50 and older, worry about AI being used to crack passwords ranked first at 87% — ahead of deepfakes (85%)… Continue reading on

Angriffsspuren aus oft ignorierten Protokollen lesen Continue reading on Medium »

The most expensive mistake in crypto can take less than five seconds to make. Continue reading on Medium »

DealProof started as a hackathon build. Two AI agents, negotiating inside a Trusted Execution Environment, with a cryptographic proof at… Continue reading on Me

“Secure by design” is one of those phrases that shows up in almost every cybersecurity regulation, and it’s vague enough that most… Continue reading on Medium »

A scam email landed in my inbox this week wearing a logo, some fake urgency, and grammar bad enough to solve the whole mystery for you Continue reading on Mediu

This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job re

For most of my career, I have worked somewhere between business, technology and transformation — as a technology consultant, digital… Continue reading on Medium

Behind the Shadows of the Dark Web: The Fall of “Orphan” and the Deception of G91 In the deepest corridors of Tor networks and end-to-end… Continue reading on M

The reason is arithmetic. NIS2 asks for ten measures, and these two are parts of two of them. Continue reading on NIS2 Navigator: Clear Answers for Business Lea

A toxic relationship is just a protocol mismatch with extra feelings. Continue reading on Medium »

Hello! I work in DLP incident response, but I'm starting to stagnate in my career, so I want to shift (or try to) to a more technical position. I don't want to

A field note from a penetration tester on discovering — and responsibly disclosing — a reflected XSS vulnerability on a live job-search… Continue reading on Med

Most enterprise security teams pour their energy into hardening customer-facing apps — and almost none into the “boring” vendor appliance… Continue reading on M

Your Firewall Might Be the One Thing Attacking Your Network Continue reading on Medium »

A few years back I sat in on a post-mortem call with a business owner whose company had just lost three days of customer records to an… Continue reading on Medi

These platforms exist because they made a deal with hackers: hand over the admin dashboard instead of selling it. Bugcrowd’s own… Continue reading on Medium »

These were good security practices 10 years ago. Attackers evolved. Our code did not. Continue reading on Medium »

This article covers the fundamentals of Reverse Engineering; Binaries. Continue reading on Medium »

For years, cybersecurity experts warned that AI would eventually be used to power cyberattacks. Anthropic just confirmed it’s already… Continue reading on Mediu

Se i sistemi Windows dominano le postazioni di lavoro, l’infrastruttura server e cloud del mondo aziendale gira prevalentemente su Linux… Continue reading on Me

Most scam texts don’t need a genius URL. They need you in a hurry. These five questions slow your thumb down. Continue reading on No Time »

AWS has built-in malware protection for S3, but that scan happens after files reach storage. Continue reading on Stackademic »

AWS has built-in malware protection for S3, but that scan happens after files reach storage. Continue reading on Stackademic »

Attacker-controlled, invisible to every server-side defence, and unguarded because developers do not think of them as input. Continue reading on Medium »