Security Insights
Thoughts, analyses, and guidance on cybersecurity trends and best practices
Your First Sigma Rule: From a Raw Log Line to a Working Alert
You spotted something odd in the logs. Here's how to turn that single line into a Sigma detection rule your whole team can run, test and trust, explained from scratch.
6 MFA Myths That Leave Your VPN Wide Open
MFA on your VPN only guards the login. This beginner's guide explains session hijacking, login-bypass bugs and push fatigue, plus the warning signs that catch what MFA misses.
Claude Code's 'Don't Ask Again' Files: Find and Fix Leaked Keys
One click on "Yes, and don't ask again" in Claude Code can save a password into a project file. That file has turned up in 1,122 public GitHub copies. This post corrects five common beliefs about it and explains how to find, revoke and hide these files.
*sshole: Patch and Hunt OpenSSH Long-Password Logins on Alpine
On musl-based systems such as Alpine, a password over 256 bytes could log in to "*" key-only accounts through OpenSSH. Here's how to find exposed hosts, patch to 10.6p2, and search auth logs for logins that should be impossible.
Hackers Defrosted Europe's Supermarkets: The Gear Your SOC Can't See
Overnight on 2 November 2026, attackers remotely warmed fridges and freezers in more than 115 European stores. It came a month after a similar wave in France. Here is how an exposed controller becomes a costly physical outage, and a checklist for monitoring OT gear that security teams usually miss.
Pyramid of Pain: Why Blocking Hashes Won't Save Your SOC
The Pyramid of Pain ranks indicators by how much it costs attackers when you detect them. This tour goes through it with one worked example per level and argues that behaviour beats chasing indicators.
Build Your First Malware Analysis Lab in One Weekend
Isolated VMs, a fake internet, strict snapshots, a shared Ghidra server and YARA: a two-day build for analysing real samples without exposing your home network.
5 Secrets Rotation Myths That Keep Leaked Credentials Working
"We rotated the key, we're fine" is how leaked credentials stay usable. A beginner-friendly look at five myths about revocation, blast radius and secret sprawl, and how to fix each one.
RustVault: I Built My Own Password Vault, Then It Tried to Lock Me Out
RustVault is a password vault and privacy toolkit written in Rust that runs only on your own machine. Building it meant finding a deadlock that locked out the owner after five logins, a backup screen that made up its numbers, and a password reset that silently destroyed every saved entry. All three are fixed, and this is the story of how.
Responsible Disclosure: Browser DevTools and Direct File Access in SlidesGPT
You can download full presentations from [SlidesGPT](https://slidesgpt.com) for free—**no signup or payment needed**—by inspecting your browser’s **Network tab**. When a presentation is generated, SlidesGPT fetches a `.pptx` file from a public Google Cloud URL (e.g., `https://storage.googleapis.com/pptgpt/result_XXXX.pptx`). By copying this URL from the console, you can directly download the presentation without any restrictions. This simple trick lets you access your AI-generated slides instantly and freely.
Bluewave vs Uptime Kuma: A Real-World Comparison for Monitoring Uptime and Beyond
In this deep dive, we compare two powerful contenders—BlueWave Uptime, built for detailed server analytics and real-time incident tracking, and Uptime Kuma, the sleek and simple uptime monitor with a beautiful UI. Whether you're managing critical infrastructure or just want to keep tabs on your services, this comparison will help you choose the right tool for your needs.
Nextcloud
Why nexcloud is better than google
🔍 Keeping Your Linux Services in Check: How I Use Monit for Bulletproof Monitoring 🚨
> *“If it can fail silently, it probably will.”* > — Me, after hours of debugging why a service stopped 6 hours ago.
Stay Updated with Security Insights
Subscribe to receive notifications when new security articles are published.