Cybersecurity

Permission Governance in GBase 8c: Separate Role Boundaries First, Then Assign Privileges

Chaos in permission management almost always starts with granting privileges directly to users. The …

Less Noise, More Labs: How I Actually Learned RF Hacking This Year

Let me be honest with you. If you spend more time reading about RF hacking than actually doing RF ha…

Understand Authentication — NTLM vs Kerberos vs LDAP

This blog provides an in-depth analysis of three popular authentication methods — NTLM, Kerberos, an…

I Built an Autonomous AI Security Brain for Linux Servers (It Actually Responds, Not Just Alerts)

I got tired of security tools that wake me up at 3am with alerts but leave all the real work to me. …

VeilPDF

The problem nobody talks about Copy text from an academic PDF. Paste it. Get $%&@#^*~. That's not…

iam:PassRole Explained: The Most Abused IAM Permission

Originally published at shieldly.io/blog. Of all the IAM permissions that appear in misconfigured …

Engineering security operations for Toronto's venue density: 5 system-level failure modes operators need to map

Engineering security operations for Toronto's venue density: 5 system-level failure modes operators …

OpenMed Is Now Deployable on Phala Cloud

Note: This article is Adapted from the official Phala announcement. Healthcare AI has a data probl…

Who actually wrote that commit... you, or your AI agent?

The gap nobody's really tracking Your Git history can tell you that a workstation pushed a commit.…

Your AI agent has sudo. I built a tool to take it away.

A few weeks ago I gave an AI agent access to my machine through MCP. It read files, opened PRs, quer…

Elding: Your API Key Never Enters Your Application's Memory

I’m building Elding (elding.app), a tool where your API key never touches your app’s memory, neither…

io_uring Security: The Linux Speedup That Hides Rootkits

Sixty percent of the kernel exploits submitted to Google's kCTF reward program in a single year hit …