Tour of the network traffic "zoo": top 10 anomalies inside your perimeter
My name is Boris Uskov, I head the network analytics team at Garde. Most anomalies we see in a customer's network in the first days after NDR deployment are not attacks…
Security - Articles for May 2026 year
Read interesting articles and reviews for May 2026 year. Analysis of key events in the "Security" sector
Messages from Angels and the First Step to Computers: Steganography of the Middle Ages and Renaissance
The ancient Greeks and Romans invented almost everything—from democracy to aqueducts and… steganography, which was discussed in the previous publication.
How I Developed a PoC Constructor for Android Applications
How routine development of PoC applications for Android led to the creation of a proprietary payload constructor from the idea generation to the emergence of DexRunner…
AI nullified benchmark and tried to blackmail engineer. And why it's solvable
Top AI models with 95% on SWE-bench show 0% and 3% on ProgramBench benchmark where tasks are specially not overlapping with the training sample.
CGE: Visualization of a crawler and hidden connections between subdomains
I’d like to share my open-source tool for finding directories and subdomains, also known as a crawler, with you. I’m not claiming it will revolutionize the crawler space…
Java and Post-Quantum TLS
JDK 27 will introduce JEP 527: hybrid post-quantum key exchange for TLS 1.3. We break down what changes in JSSE, why X25519MLKEM768 is needed, and what issues may arise…
Meta revealed on May 1 how they store keys for your WhatsApp backups. I break down the architecture and compare
Disclaimer: the article mentions my own messenger ONEMIX several times. If that triggers you, close this now, I won't be offended. If you're interested in how Meta and…
Attacker publishes .bash_history: watch without registration and SMS
Supply Chain Security team of the expert security center sent a report to the npm registry administration about a fun little campaign against Apple, among them:
From Network Visibility to Cybersecurity: The Main Myth About Network Telemetry That Hinders Unlocking NetFlow's Potential
Hi tekkix! This is Stanislav Gribanov, I am the NDR product lead at Garda, author of the blog "Cybersecurity and Product Expertise for Businesses".
4-3-2 Scheme vs 3-2-1 and 3-2-1-1-0: What's the Difference
Backups used to be the last line of defense. Now they are the first attack target: modern ransomware operators access backup storage before touching working data, because…
Collecting data from open sources: why is it risky when information is scraped from other people's databases?
Gathering information about a person or product using advanced technology has become a trivial technical task, both literally and figuratively. However, such data scraping…
How the anti-bot works in the Wildberries mobile app
Hello tekkix! My name is Denis Ulyanov, I have been in IT for 12 years, and for the past year and a half I lead the Antibot team at Wildberries.
To build or not to build... your own messenger — that is the question
Building a corporate messenger in-house: exploring potential pitfalls with data and real experience, without drama. It's not always a bad idea; sometimes it's the right…
Top Most Interesting CVEs of April 2026
We've gathered the most interesting CVEs of April in our traditional roundup. Critical vulnerabilities under RCE were noted last month by Microsoft Azure and Bing, as…
Penetration Testing 2026: How to Enter the Profession
In penetration testing, people often try to enter through a list of tools: learn Burp, run Nmap, complete a couple of labs, and wait for the first real task. In 2026,…