eBPF Explained: Verified Programs Inside the Kernel
How eBPF runs verified, JIT-compiled programs safely in the Linux kernel — and why networking and security tools bet their stacks on it.
Blog
SSRF to Cloud Metadata: The Attack Behind Capital One and How to Stop It
How SSRF turns one forged request into cloud-wide credential theft — the Capital One chain, IMDSv2, and the controls that actually block it.
Decode ACARS and VDL2 with acarsdec and dumpvdls2: SDR Lab
Decode live aircraft ACARS and VDL2 datalink traffic with about $30 of SDR hardware, acarsdec, dumpvdls2 and Wireshark — a complete hands-on radio lab.
Weekly Threat Intel: Agentic AI Abuse and Edge CVEs
Agentic-AI abuse, the fall 2026 Edge CVE wave and infostealer tradecraft — this week’s defensive priorities in one briefing.
Certificate Transparency: How Merkle Logs Ended Blind Trust in CAs
How Certificate Transparency Merkle logs, SCTs and monitors make every TLS certificate publicly auditable — and how they caught Symantec in 2015.
Weekly Threat Intel: Agentic AI, Stealer Logs, Edge CVEs
Stealer-log markets, edge-device exploitation and agentic-AI abuse: what defenders must patch, monitor and drill this week.
Detection Engineering with Sigma: Detections That Survive Vendor Churn
How Sigma turns SIEM detections into portable YAML, how pySigma pipelines compile them to any backend, and how to test rules like code with Atomic Red Team.
Fuzzing Web APIs with ffuf and Caido: Recon-to-Exploit Guide
A hands-on recon-to-exploit walkthrough: fuzz hidden endpoints and parameters with ffuf and Caido, chain the findings, and document the impact.
Build an MCP Security Lab: Intercept and Audit Model Context Protocol
Build a local MCP security lab: intercept, audit and attack Model Context Protocol servers with proxies, rogue tools and logging you fully control.
Weekly Threat Intel: Agentic AI Abuse and September 2026 CVEs
Agentic-AI abuse, the September 2026 CVE wave and ransomware tradecraft — this week’s defensive checklist.
Why Time Synchronization Breaks: NTP, PTP and the Leap-Second Problem
How NTP and PTP keep infrastructure clocks honest, why leap seconds took down Cloudflare and Reddit, and how to run time sync you can trust.
Kubernetes Security Fundamentals: RBAC, Pod Security and the Controls That Matter
The Kubernetes security layers that stop real cluster compromises: control plane, RBAC, Pod Security Admission, network policy and image supply chain — with a ten-point audit checklist.
- Go to the previous page
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- …
- 33
- Go to the next page