Explore articles on Threat Intelligence, Cybersecurity, AppSec, and Information Security. Content created to share knowledge, analysis, and best practices that strengthen the security posture of organizations and professionals in the field.
-
Security Awareness That People Actually Remember
Once a year, employees receive a security course, watch a few slides about phishing, answer ten questions, click “Complete,” and magically become immune to cyberattacks for the next twelve months. At least, that seems to be the plan. Security awareness is often treated as a compliance requirement instead of what it should actually be: a…
-
Purple Teaming: When Red and Blue Actually Work Together
Red Teams try to break things. Blue Teams try to stop them. That sounds like a perfect relationship until both teams finish an exercise, write separate reports, move on, and discover six months later that the same detection gap still exists. Purple Teaming exists to make that interaction more useful. Instead of treating offensive and…
-
Detection Engineering: Turning Logs Into Security Signals
Collecting logs is easy. Well, relatively easy. Applications, endpoints, firewalls, identity providers and cloud platforms happily generate enormous amounts of telemetry every day. Put enough of it into a SIEM and you can build dashboards impressive enough to make almost anyone feel secure. Unfortunately, attackers are rarely defeated by dashboards. The real challenge is deciding…
-
Non-Human Identities: The Accounts Nobody Remembers to Disable
Most identity programs are built around people. An employee joins, receives access, changes roles, and eventually leaves. Ideally, their permissions follow the same lifecycle. Machines are less cooperative. Applications, automation pipelines, cloud workloads, bots, integrations and AI agents also need access to systems. They authenticate, receive permissions and interact with sensitive resources, but they rarely…
-
API Security: Why Protecting the Website Is Not Enough
Modern applications are rarely just websites. A user may interact with a polished interface, but behind it there are APIs handling logins, payments, profiles, orders, integrations, mobile applications and communication between services. In many cases, the website is simply one client consuming those APIs. So protecting only what users see is a bit like installing…
-
Command Injection in DumbDrop: CVE-2025-24971
A filename should tell an application what to call a file. It should not tell the operating system what command to execute. Unfortunately, applications occasionally mix user-controlled data with system commands and then ask a shell to interpret the result. At that point, the filename stops being metadata and starts auditioning for a terminal session.…