Cybersecurity

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operations to…

Outil de Cybersécurité du Jour - Jul 20, 2026

L'importance de la cybersécurité aujourd'hui : Guide sur l'outil Wireshark De nos jours, avec l'au…

The model benchmark is not your production benchmark

A model can top every evaluation you care about and still be impossible to ship. That sounds backwa…

AI Agents in Production: Why 88% of Enterprise Pilots Fail (2026)

The headline number from the 2026 State of AI Agents report is uncomfortable: 88% of enterprise AI a…

How to Investigate WordPress ?p=, ?q=, and ?a= SEO Spam URLs

During a WordPress SEO spam investigation, I found Google requesting URLs like these: https://exa…

Why Cleaning WordPress Malware Does Not Remove Spam Pages From Google

A website can be malware-free today while Google continues showing hacked pages for weeks or months.…

How I Used 410 Gone Rules to Remove WordPress SEO Spam URLs

A hacked WordPress website can be cleaned in a few hours, but the damage left in Google may remain m…

5 Security Mistakes Every Developer Makes (And How to Fix Them in 2026)

We all make security mistakes. The difference between a good developer and a great one is catching t…

I built an open-source web vulnerability scanner — here's what I learned about scan fatigue

For the last few months I've been building BugBounty Arsenal — an open-source web application securi…

Claude Code 出现 403，先别急着换号：账号、组织与客户端三层排查

在终端里看到 Claude Code 返回 403，很容易立刻得出一个结论：账号被封了。 但 403 是访问被拒绝的技术线索，不是完整的账号状态说明。个人账号被明确禁用、组织被暂停、登录状态失效，甚…

A JSONPath engine that follows the spec and can't run code

I needed to pull a few fields out of some JSON. Nothing exotic, a couple of nested values and one fi…

SLSA, Sigstore and Provenance — Complete Practical Guide

SLSA + Sigstore + Provenance — Complete Mental Model 1. The problem this whole ecosystem …