cybersecurity
-
Solved: My home lab finally paid off — caught factory-installed botnet malware on a projector I bought on Amazon
A home lab found botnet malware on a new projector. Learn why network segmentation is essential to isolate untrusted IoT devices and secure your netwo Continue reading
-
Solved: Security: How are you dealing with the ever mounting amount of phishing with darn good looking Microsoft login prompts?
Tired of phishing that bypasses MFA? A DevOps expert shares 3 battle-tested strategies, from DNS fixes to conditional access, to secure your M365 tena Continue reading
-
Solved: Competitor suddenly outranking everyone, checking their traffic sources?
Stop competitors from stealing your traffic and content. Learn how to identify and block referrer-spoofing bots using Nginx and a WAF to protect your Continue reading
-
Solved: GuardDuty found outgoing SSH Bruteforce attack – what now?
Got a GuardDuty alert for an outgoing SSH bruteforce attack? Your EC2 is compromised. Learn how to contain the threat, find the root cause, and secure Continue reading
-
Solved: Lockdown Mode prevented FBI from getting into reporter’s iPhone
Apple’s Lockdown Mode blocked the FBI by reducing the attack surface. Learn how to apply this powerful security philosophy to your own cloud infrastru Continue reading
-
Solved: Best self hosted password manager for MSPs?
Find the best self-hosted password manager for your MSP. We break down top options for multi-tenancy, access control, and securing client secrets. Continue reading
-
Solved: Does your company enforce cyber rules that you consider stupid? Have you managed to make a difference?
Frustrated by stupid cyber rules? A DevOps engineer shares how to fight security theater with practical fixes that improve real-world security. Continue reading
-
Solved: How can they be secure, mobile password managers that locally cache the vault?
Learn how mobile password managers securely cache your vault for offline access using multi-layered encryption tied to your master password and device Continue reading
-
Solved: Starkiller Phishing Kit: Why MFA Fails Against Real-Time Reverse Proxies — Technical Analysis + Rust PoC for TLS Fingerprinting
Phishing kits like Starkiller use reverse proxies to bypass MFA. Learn how these AiTM attacks work and how to defend with TLS fingerprinting and FIDO2 Continue reading
-
Solved: lotion-rs a lightweight Notion desktop client for Linux (Rust + Tauri) and starting building defenses against Notion C2 vectors
A Rust-based Notion client highlights supply-chain security risks and C2 vectors. Learn how attackers abuse trusted apps and 3 ways to defend your net Continue reading