Cybersecurity

Deploying a Telegram MTProto Proxy on AWS with Terraform

GitHub link: shobanchiddarth/telegram-proxy-server-aws Introduction In my previous blog …

I built a security scanner for AI-generated code — here's what it found

Vibe coding is everywhere. You prompt Claude or ChatGPT, paste the output, ship it. Fast. But here's…

Who Is Email Security Actually Built For?

Email has one of the most mature security stacks in tech: SPF, DKIM, DMARC, BIMI, advanced spam filt…

A Small Checklist for Apps That Handle Vulnerable User Data

Architecture-level checklist context: health app privacy architecture A normal web app checklist…

Le dije a un atacante de IA que ganó. Perdió.

Cada vez que un LLM dice "No puedo ayudarte con eso", le está regalando un gradiente de optimización…

Auditing Connected Apps and OAuth Scopes in Salesforce

# Auditing Connected Apps and OAuth Scopes in Salesforce As a senior Salesforce administrator, I've…

New Prinz Eugen ransomware prioritizes recent files for encryption

A new ransomware operation named 'Prinz Eugen' prioritizes recently modified files for encryption an…

Security Pitfalls in React Apps I Learned the Hard Way

A few months back I was doing a code review for a friend's project and noticed they were storing JWT…

WAF-Bypass.dev: Building a Small Payload Obfuscation Toolkit for Learning Web Security

WAF-Bypass.dev: Building a Small Payload Obfuscation Toolkit for Learning Web Security While learn…

AI Regulatory Fragmentation: Attack Surface for Nation-State Espionage & Supply Chain Compromise

Originally published on satyamrastogi.com Democratic AI regulation fragmentation becomes attack ve…

Making GBase 8c Auditing Work: Traceable, Retainable, and Queryable

GBase 8c offers a comprehensive auditing framework, but simply flipping the switch is not enough for…

I built a self-hosted DPI-resistant tunnel over TLS + WebSocket in Rust

I built BibaVPN for one reason: I did not want to hand traffic to a third-party VPN provider. It is…