Cybersecurity

Applying SAST Tools to Infrastructure as Code — A Hands-On Look at Checkov

Why Infrastructure as Code Needs Static Analysis Too Infrastructure as Code (IaC) — Terraform, Pul…

Applying SAST Tools to Real Applications — A Hands-On Look at Bandit

What is SAST, and Why It Matters Static Application Security Testing (SAST) analyzes source code —…

Segurança e Qualidade na Prática: o papel do SAST, DAST e dos testes automatizados no ciclo de vida do software moderno Por Eduardo — ADS, UNIDEP

O chamado que ninguém quer atender Imagine receber, numa sexta-feira à tarde, a seguinte mensagem n…

Verify your Composer dependencies' provenance

When the xz backdoor landed in 2024, it was a wake-up call for every package ecosystem: the code you…

KVKK ve Yabancı AI Servisleri: Şirketler İçin Gizli Bir Risk

Giriş Türkiye'deki yazılım şirketleri gün geçtikçe daha fazla yapay zeka aracı kullanıyor. ChatGPT…

The Hidden Security Risk Behind the mkdir Command on Linux

Malware doesn't always hide in obvious places. Sometimes it hides in the most boring, most overlook…

Webhook Security Best Practices: HMAC, Replay Attacks & Encryption

Webhooks are the quiet infrastructure behind most modern integrations API endpoint security automat…

Guardrails for LLM Apps in Python

Introduction Every post in this series has quietly touched a piece of the same problem. Building A…

Guardrails for LLM Apps in Java

Introduction Every post in this series has quietly touched a piece of the same problem. Building A…

Offensive Security Intro

This is the starting of my journey. The first path I cross is TryHackMe. This is the first room from…

Understanding GIS APIs in Public Safety Applications: A Developer's Guide

Modern public safety systems rely on far more than databases and dashboards. Whether dispatching off…

How to mask PII before using AI chat at work

People paste work text into AI chat every day. A support agent copies a customer email to draft a re…