Security Week 2623: user tracking via SSD
Researchers from Graz University of Technology in Austria published a scientific paper proposing a method to track user activity through a browser
Security - Articles for June 2026 year
Read interesting articles and reviews for June 2026 year. Analysis of key events in the "Security" sector
Hollywood poured millions into DVD protection, and a Norwegian high school student who simply wanted to watch movies on Linux broke it.
So here’s a common, overused narrative: greedy corporations invented the protection, and evil hackers cracked it. It’s flashy, dramatic, and of course completely untrue.
Response Pain: How Information Security Processes Affect Incident Investigation
Incident investigation is a critically important subprocess of information security incident management, aimed at identifying the primary vector of compromise, minimizing…
Benchmark for Evaluating LLMs in Security Finding Triage Tasks
I created a custom benchmark to evaluate language models, as standard public tests do not answer my core question: which model performs better at triaging security findings.…
Islands and multiple personas on one device: how we make privacy part of the architecture
When building a private messenger, sooner or later you run into an uncomfortable question: what exactly protects the user, your promises or your architecture. Promises…
OpenBSD 7.9: Wi-Fi 6, USB4 and 255 Core Support. Key OS Changes
OpenBSD 7.9 was released in May 2026. In the new version, developers updated the task scheduler for hybrid processors, added a deferred hibernation mechanism, refined…
How a single jammed Xerox printer sheet led to the creation of GNU Linux and the entire Open Source philosophy
It is widely believed that the modern IT world was built by Gates, Jobs or Torvalds. But without one bearded hacker from MIT who had a bitter falling out with a Xerox…
Threat modeling for those with paws
Hello, tekkix! My name is Sergey Zinovyev, I am an information security business partner at Avito. While some code security scans can be easily automated, vulnerabilities…
Transformer in on-premise AppSec: how we integrated an ML model for classifying secrets into a product without GPU
We share how we integrated a CodeBERT-based secret classification model into a production product with strict hardware constraints, reducing inference time from 320 to…
Cilium and CI/CD protection: how a Kubernetes kernel-level open-source project secures its supply chain
Cilium operates at the kernel level in millions of Kubernetes pods, making its build pipeline a high-value target; compromising it could have a SolarWinds-like impact…
Cargo cult audit
It is probably best to start by explaining what a cargo cult is in general. In short: people in fairly primitive societies observed huge aircraft dropping food and ammunition…