Cybersecurity

OSINT: как узнать, что о вас есть в открытом доступе в интернете

Что такое OSINT и почему это важно OSINT (Open Source Intelligence) — это сбор информации о челове…

Segurança e Qualidade na Prática: O Papel do SAST, DAST e Testes Automatizados no Ciclo de Vida do Software Moderno

Imagine o seguinte cenário: uma startup em hipercrescimento acaba de fechar uma rodada Série A. O pr…

Признаки слежки за телефоном: 9 сигналов, что за вами следят

Как понять, что за вашим телефоном следят Слежка за телефоном — это не всегда «спецслужбы». Чаще э…

SocGholish Malware Network Exploits Fake Browser Updates: Enhanced Security Measures and User Awareness Needed

The SocGholish Takedown: Dismantling a Sophisticated Cybercrime Network On June 18, an internation…

Nice article

I put Cloudflare in front of my site, then found my origin one DNS record away from undoing it …

Building a Low-Level ICMP Sniffer in x64 Assembly (Raw Sockets)

Research Context In the realm of network security and packet analysis, tools like Python (Scapy) o…

I put Cloudflare in front of my site, then found my origin one DNS record away from undoing it

You move your site behind Cloudflare (or CloudFront, or any CDN/WAF), watch the dashboard light up g…

Linux Process Evasion: ptrace & prctl

Research Context In cybersecurity research and Red Team simulations, developing custom tools requi…

How CascadeFlow "flows" through SENTRI

Security Event Notification & Threat Response Intelligence SENTRI is an AI-powered L1/L2 SOC ana…

A PHP login form that won't get you owned

A login form is the most-copied, least-reviewed piece of PHP on the internet. Someone needs auth, th…

I Open-Sourced My AI Dashboard -- and Found My 'Secure' Proxy Was an Open ATM

I built a small offline-first, collaborative AI dashboard called AgentHub — React + Yjs (CRDTs) on t…

Understanding OWASP Mobile Top 10 (2025): A Guide for Android & iOS Developers

Disclaimer: This article summarizes the concepts I learned while studying the OWASP Mobile Top 10 (2…