A serious incident in the JavaScript ecosystem highlights the growing danger of open source and supply chain attacks. StepSecurity researchers reported the compromise…
Last week's major news was the hack of the LiteLLM library, used as an intermediary for communication with a large number of language models. Through another malicious…
Today, I read about future AI hackers and realized that the problem is much bigger than "more cyberattacks." It no longer seems like fantasy. OpenAI states that it is…
Recently, Microsoft announced a seven-point plan to fix Windows 11, which the tech press received as an act of redemption. Windows President Pavan Davuluri admitted in…
In corporate infrastructure, entry points are often more numerous than desired. Email, VPN, internal portals, development systems, cloud services—each resource has its…
Many developers have recently been using cloud-based LLMs for generating code, including with the help of agents. However, this raises at least two issues.
Imagine a situation: you carefully prepared for multi-accounting, set up the environment, assigned a unique residential proxy for each stream, and trusted your IP addresses…
In August 2019, just weeks before the Moscow City Duma elections, Pierrick Godri from the INRIA research institute published the results of an analysis of the code of…
It all started with a simple task: securely transferring files on regular USB drives without cumbersome containers or complex user setups.
A brief guide to installing a VPN on a router running OpenWRT using the Passwall package
We'd like to remind you about one of the most interesting niche books on Linux that we have published in recent years - "Learning eBPF: Linux Kernel Programming for Improving…
Weak passwords are a headache for both users and developers. The former think, "Who would hack me?" while the latter are sure, "I'm not a bank, who needs my database?"…
Information security is a vast stack of interconnected methodologies, techniques, technologies, software, and hardware, sprinkled with half a ton of regulations and decrees…
Of 50+ vendors claiming to develop NGFW after 2022, about 10 remain in the market. We analyze who and why
This time I will teach you how to find what developers hide in iOS applications. We might find passwords, personal data, or even backend API keys, which will allow us…
Hello, tekkix! This is Anton Dyatlov, information security engineer at Selectel. Recently, Echelon released Scanner-BC 7, which changed the API logic. The old script…
Hello, tekkix! My name is Nikita Chubarov. According to my labor contract, I am an engineering expert in service development and maintenance, but in reality, I am a DevOps…
Hello, tekkix! In the previous article, I covered 5 test design techniques that are asked in interviews.
