Cybersecurity
Vulnerabilities, exploits, cryptography and defensive engineering — written by people who patch real servers.
$ ls -t ~/cybersecurity
Your application is only as secure as every package it depends on. In September 2025, attackers compromised 27 npm packages with 2.6 billion weekly downloads by phishing one maintainer.
An attacker starts with a low-privileged shell or user account and escalates to root or Administrator using misconfigurations, SUID binaries, kernel exploits, and Active Directory attacks. Here's every technique, the tools professionals use, and how to harden against it.
Phishing, vishing, pretexting, physical infiltration — here's how every technique works, how attackers use them in production breaches, and how to actually defend against them.
Penetration testing is authorized, structured hacking — finding vulnerabilities in systems, networks, and applications before real attackers do. Here's the full methodology, every phase of a real engagement, the tools professionals use, and how to build a career in it.
XSS injects malicious JavaScript into web pages served to other users — stealing sessions, redirecting to phishing pages, or silently exfiltrating data. It's been in the OWASP Top 10 since 2003. Here's every type, how each one works, and how to actually fix them.
In 2008, attackers used SQL injection to breach Heartland Payment Systems, a payment processing company. They stole 130 million credit and debit card numbers. The breach cost Heartland
Encryption transforms readable data into unreadable ciphertext that only someone with the right key can reverse. It's what makes HTTPS, messaging apps, banking, and password storage work. Here's how it actually functions.
Cybersecurity is the discipline of protecting systems, networks, and data from attack, damage, and unauthorized access. Here's what it actually covers, how attacks work, how defense works, and why every developer needs to understand it.
Signing is encryption with the keys swapped, and that symmetry is exactly what makes the naive implementation breakable. Here are two forgeries executed against textbook RSA signatures, and what PSS does that hashing alone cannot.
The criminals behind the attack claim to have shared 400GB of patient data. The NHS stated it is working swiftly to confirm the validity of these files. The ransomware attack on the UK's National Health Service (NHS) continues to disrupt health services in London, with a significant amount of…
The joint investigation will thoroughly examine the extent of the data exposure in the massive breach and determine if 23andMe had sufficient safeguards in place to protect this sensitive information. UK and Canadian authorities have announced a collaborative investigation into the DNA testing…
For a good few years, it seemed that Google lived up to its old motto. Don’t be evil. It also seems that do no wrong in terms of product superiority. Google built its reputation as an ethical company that honestly has outperformed competitors. But is that reputation still deserved
$ ssh community@sudosecurity
Ask in the forums, share a snippet, or work through a course on Learn.
