Cybersecurity
Vulnerabilities, exploits, cryptography and defensive engineering — written by people who patch real servers.
$ ls -t ~/cybersecurity
Authentication remains one of the most painstaking challenges faced by cybersecurity professionals and researchers. This ranges from a small startup all th way to the biggest organizations. This longstanding and even fundamental element of security continues to cause everyone to have a headache.…
A major hack has resulted in approximately just a little over 600 million worth of cryptocurrency being stolen from Ronin. This was the gaming-focused blockchain network used for the NFT-based game Axie Infinity. Ronin said that roughtly 173,000 Ethereum and 25 million USDC – a stable coin…
Hackers have now begun to attack internet-connected universal power supply devices. They are targeting their control interfaces via multiple remote code execution vulnerabilities. In some of the cases, they changed the default usernames and passwords, according to an important advisory from the…
It's finally time that the US Department of Justice (DoJ) has charged three Russian FSB officers and a programmer that worked for a Russian military research institute. The past attacks were against industrial control systems (ICS) operated by critical infrastructure providers. Each of the…
Security Researchers have recent observed large application-layered distributed denial-of-service attacks using techniques that could end up foiling DDoS protection and defenses in the past few years. This could be yet another sign of things and change for web application operators. This attack…
The amount of Ransomware attacks had reached unprecedented levels in 2021, with ransomware threat actors demanding, and in many cases receiving, ransom payments in the multiple sums of millions of dollars. The world’s largest meat processor, JBS, they confirmed in June 2021 that it paid the…
The major technology companies of the United States – names such as Google, Microsoft, Apple, and Facebook – came together at an important White House Summit over the weekend to discuss the ways to make the open source software space more secure in light of recent disastrous…
RSA Encryption has always been amazing to me. It allows you to publish an encryption key – also known as e – without having to compromise your decryption key – known
Extend a bare PHP MVC skeleton into something real: dependency injection, PDO-backed models with prepared statements, route params, and view escaping.
Both Microsoft, Inc. and Alphabet, Inc. will put a combined $30 billion dollars into cybersecurity over the next five years and work with the public sector on several initiatives to help improve cybersecurity.
Part 1 used 15-bit primes and only encrypted integers. Making it usable means generating 1024-bit primes and chunking bytes — and the standard way to do the second one silently destroys data on inputs the tests never cover.
Every HTTPS connection you have ever made runs on a 1978 paper. You can build the core of it in about fifty lines of Python — and then see exactly why those fifty lines would get you destroyed in production.
$ ssh community@sudosecurity
Ask in the forums, share a snippet, or work through a course on Learn.
