Penetration Testing 2026: How to Enter the Profession
In penetration testing, people often try to enter through a list of tools: learn Burp, run Nmap, complete a couple of labs, and wait for the first real task. In 2026,…
Cybersecurity: Protecting Your Digital World
Understanding Cyber Threats and How to Mitigate Them
Security Week 2614: Supply Chain Attack on LiteLLM Library
Last week's major news was the hack of the LiteLLM library, used as an intermediary for communication with a large number of language models. Through another malicious…
When Trust Became a Vulnerability: What Recent Studies Say About AI's Impact on Cybersecurity
IBM, ReliaQuest, and Resilience studies show AI has made cybercrime far more effective, lowering entry barriers for attackers and increasing scaling opportunities, while…
SSO: How Single Sign-On Works and How It Is Implemented in MULTIFACTOR
In corporate infrastructure, entry points are often more numerous than desired. Email, VPN, internal portals, development systems, cloud services—each resource has its…
Orbital Data Centers: Nvidia Unveils Vera Rubin AI Module for Satellite Constellations
Nvidia has introduced the Space-1 Vera Rubin platform for transferring computing power beyond Earth. The new equipment provides inference performance 25 times higher…
"What will we do when a breach happens?": Preparing for incidents in advance using video games as an example
Hello, Habr! My name is Askar Musaev, I am a business continuity expert at Infostroy Jet. In this article, I will discuss how to systematically assess a company's readiness…
What is "IB strategy" that Business will understand
What is "IB strategy" that Business will understand
On the radar: industries leading in data leaks in 2025
Recently, Russia and its organizations remain a top target for cyberattacks. Instead of targeting individual companies, attackers choose entire industries as victims.…
Pentest with AI agents, experiment with CAI
Hello tekkix!
OSI Network Model: Simple Explanation of Layers
Currently, the main model used in most network interactions is TCP/IP. It is simpler, more compact, and widely used. But here’s the catch: in any serious certification,…
AI attacks, AI defends: how to use neural networks in information security
Hello! We share with you the material prepared by Roman Strelnikov — head of the information security department at Bitrix24. Roman is the person who controls everything…
The first large-scale MCP security study: what the analysis of 1,899 publicly accessible servers revealed
Model Context Protocol is rapidly becoming the de facto standard for interaction between AI agents and external tools. The statistics are impressive: as of May 2025,…
![How a Designer’s Stolen Passwords Nearly Tanked a Startup [MITRE: T1078 — Valid Accounts]](https://cdn.tekkix.com/imgs/2026/02/habrcom/big/2b1324c236d80e66ed5b9b52f2a0.webp)
How a Designer’s Stolen Passwords Nearly Tanked a Startup [MITRE: T1078 — Valid Accounts]
Incident Description: The attacker uses stolen credentials to access the company’s server, website, or cloud.
Let's still make it until the May holidays: what is important to do so that the "long" weekend is not overshadowed by cyberattacks
Holidays, public holidays, any "extra" days off - this is an opportunity for attackers to try to launch an attack. The attackers' calculation is simple: the fewer "defending"…
IDOR & UUIDs for PII Leakage
Hello, today I will share with you another report. The vulnerability we will discuss is IDOR. Using it, I was able to expose personally identifiable information (PII…
"The point is not in the muse and inspiration. The point is in labor." An honest interview with Alexey Lukatsky about the pros and cons of book writing
Hello! Today we decided to remind tekkix readers that Positive Technologies not only research vulnerabilities, write research papers, and develop software for protection…
Detection is easy. Installing OPNSense and configuring NetFlow
Continuing the series of articles. - Detection is easy, dedicated to Detection engineering, which I write about in the Telegram channel of the same name. Today we will…