Alive Photos: Creating a Private Steganographic Audio Player with Python and PyQt6
Hello, tekkix!
Security
Discover the latest news, reviews, and best practices in information security. Stay updated on cybersecurity threats, protection strategies, and innovations in safeguarding data
Debugging with “Tetris”: A step-by-step guide to creating and hiding the classic game in your project
Hello, tekkix! Every developer reaches a point in a serious project when they want to take a break and write something just for fun. Something simple, classic, and yet…
Balancing on the Edge: How to Implement Differential Privacy in Analytical Pipelines in Python
In this article, I will explain how to add Differential Privacy mechanisms to your ETL and analytical pipelines in Python to protect user data while maintaining the quality…
What remains after us online — and how to deal with it
My friend passed away recently.
AI attacks, AI defends: how to use neural networks in information security
Hello! We share with you the material prepared by Roman Strelnikov — head of the information security department at Bitrix24. Roman is the person who controls everything…
Analysis of CVE-2025-27736 vulnerability in Power Dependency Coordinator
This article is dedicated to the bug in Power Dependency Coordinator, patched by Microsoft in April of this year.
Here's the translated text you requested: How I made friends with Yandex Cloud and Gemini API without migrating to foreign servers
When I started writing the Node.js service that was supposed to integrate with the LLM model, I already understood that access to some foreign APIs from Russia could…
Kristina Svechinskaya: How a Young Russian Woman Became a Star of the Cybercriminal World
If you enter the phrase "most famous female hackers" into any foreign search engine, the impartial search engine will instantly generate a list, with Kristina Svechinskaya…
Frontend Risks #1: Bitrix CMS sends your clients' data to Ireland
As a result of my security research of 3,000 Russian frontend applications, it was discovered that Bitrix CMS has been transmitting website visitors' personal data to…
When Language Models Turn Against You: A Study of Backdoors in LLM
Imagine you're running a call center and decide to implement an open LLM for automating communication. Everything works great—until a scammer whispers a strange phrase,…
Hydroph0bia — from bypassing SecureBoot to modifying the DXE volume in Insyde H2O UEFI-compatible firmware
Hello, reader. In front of you is the second article about a serious vulnerability I found in UEFI-compatible firmware based on the Insyde H2O platform, which I named…
Electronic signature leak: how to lose property, money, and a company
Electronic signatures have long been an integral part of corporate processes. They are used to sign crucial documents, confirm transactions, and conduct financial operations.…
A hole in Cloudflare’s shield: how the attack on Jabber.ru exposed a problem no one has talked about since 2023
Many remember the year-before-last incident with the Man-in-the-Middle attack on the XMPP service jabber.ru. This story caused a lot of noise, but I think the main point…
No security exists: how the NSA hacks your secrets
Finite fields, hash mincers, covert radio channels, and trojans soldered into silicon. While we pride ourselves on AES-256 locks, intelligence agencies seek workarounds:…
Zerotrust the Streetwise Way #3. Endpoint Protection
Let’s recall the main idea of ZT for admin panel protection: you can only access the admin panel by providing a certificate that’s stored in a secure device keystore.…
How HTTP is Used for DNS: DNS-over-HTTPS in Practice
HTTPS makes it possible to implement secure interaction with the DNS resolver interface, concealing the DNS traffic that would otherwise be transmitted in plain text.…
![How a Designer’s Stolen Passwords Nearly Tanked a Startup [MITRE: T1078 — Valid Accounts]](https://cdn.tekkix.com/imgs/2026/02/habrcom/big/2b1324c236d80e66ed5b9b52f2a0.webp)
How a Designer’s Stolen Passwords Nearly Tanked a Startup [MITRE: T1078 — Valid Accounts]
Incident Description: The attacker uses stolen credentials to access the company’s server, website, or cloud.
