Attacker publishes .bash_history: watch without registration and SMS
Supply Chain Security team of the expert security center sent a report to the npm registry administration about a fun little campaign against Apple, among them:
Security - Articles for the year 2026
Read interesting articles and reviews for the year 2026. Analysis of key events in the "Security" sector
From Network Visibility to Cybersecurity: The Main Myth About Network Telemetry That Hinders Unlocking NetFlow's Potential
Hi tekkix! This is Stanislav Gribanov, I am the NDR product lead at Garda, author of the blog "Cybersecurity and Product Expertise for Businesses".
4-3-2 Scheme vs 3-2-1 and 3-2-1-1-0: What's the Difference
Backups used to be the last line of defense. Now they are the first attack target: modern ransomware operators access backup storage before touching working data, because…
Collecting data from open sources: why is it risky when information is scraped from other people's databases?
Gathering information about a person or product using advanced technology has become a trivial technical task, both literally and figuratively. However, such data scraping…
How the anti-bot works in the Wildberries mobile app
Hello tekkix! My name is Denis Ulyanov, I have been in IT for 12 years, and for the past year and a half I lead the Antibot team at Wildberries.
To build or not to build... your own messenger — that is the question
Building a corporate messenger in-house: exploring potential pitfalls with data and real experience, without drama. It's not always a bad idea; sometimes it's the right…
Top Most Interesting CVEs of April 2026
We've gathered the most interesting CVEs of April in our traditional roundup. Critical vulnerabilities under RCE were noted last month by Microsoft Azure and Bing, as…
Penetration Testing 2026: How to Enter the Profession
In penetration testing, people often try to enter through a list of tools: learn Burp, run Nmap, complete a couple of labs, and wait for the first real task. In 2026,…
Not for the certificate: my experience with HTB CWES
I’ll make it clear right away: this is not a walkthrough. There won’t be a step-by-step breakdown of the exam, spoilers about machines, or any secret techniques. I don’t…
Encrypting IDs with Feistel Network: API Protection Without Database Modifications
Many APIs still expose incremental IDs in URLs - one curl in a loop, and the attacker has the entire table. This is exactly what APCOA fell victim to in April 2025. I…
Security Week 2617: Crypto Stealers in the Chinese Apple App Store
Researchers from Kaspersky Lab examined the tactics of malware distribution through the official App Store for Apple devices.
How hackers bypassed 2FA and seized cloud infrastructure
In recent years, hybrid infrastructure has become the de facto standard. Companies are moving critical services to Azure, AWS, Google Cloud, or Yandex.Cloud while leaving…
Three Layers of Server Protection: ipset, auto-block, and CrowdSec
Are your logs filled with login attempts on .env, .git, and wp-login.php? While the bot is knocking on Nginx, your server is already wasting precious resources. I decided…
WireSock Secure Connect 3.x: what’s behind the release notes
On April 8, 2026, WireSock Secure Connect 3.4.4 - the first official release of the 3.x branch - was released.
A Brief History of Biometrics: How Fingerprinting Entered Our Lives
The history of biometric dermatoglyphics on the human fingertip has been studied in detail and published hundreds, if not thousands, of times in both brief and detailed…
OSINT for the Lazy. Part 7: Remembering Forgotten Passwords for a Zip Archive in 2 Minutes
What is junk? Junk is what you keep for years and throw away just before you need it.
Daily Life of an Information Security Analyst: Reports, Vulnerabilities, and Real Security
Here is the PT Cyber Analytics team. In this article, we will talk about the work of analysts in cybersecurity projects, show what makes this profession attractive, and…
Real case: how a construction company lost 730 days on software installation "due to a socket"
The client carefully selected the system but forgot to prepare the infrastructure in the organization. We will analyze the mistake, the consequences, and how to avoid…
