Information Security Risk Assessment — How to Map Risks Before They Become Incidents
Information Security Risk Assessment — How to Map Risks Before They Become IncidentsWhen building or maintaining a small system, I'm often …
CIS Controls v8 for Small Organizations — Starting with Security Where it Makes the Most Impact
CIS Controls v8 for Small Organizations — Starting with Security Where it Makes the Most ImpactWhen you hear the term cyber security framew…
Phishing and Social Engineering — How Human Attacks Work and How to Protect Yourself
Some time ago I was almost tricked. Not because my device is not secure, nor because my password is weak. It all started with one short mes…
Server Monitoring for Home Server — Kuma and Netdata Uptime Setup to Avoid Missing Problems
Some time ago, I realized that the server at home had been down since last night. Either because of a power outage, an automatic update t…
NIST Cybersecurity Framework — A Practical Guide to Implementing 5 Key Functions for Small Organizations
I still remember the first time I read the NIST Cybersecurity Framework document several years ago. The number of pages was enough to make …
Bug Bounty for Beginners — Tips to Start the Journey of Finding the Hole with Ethics
There are times when I sit in front of the terminal, thinking about the same thing: how do I learn cyber security practically without…
Digital Imperfections — Why We Don't Need to Fix Everything
A while back, I spent a Saturday night moving all my notes from one note-taking app to another. The reason is classic: there is a new featu…
Digital Legacy — What's Left Behind When Our Accounts Stop Being Active?
Some time ago I just opened an old folder in cloud storage for fun. There are photos from 2014, blog notes that have never been published, …
Tmux Workflow — Managing Terminal Sessions Like Managing a Workbench
There were times when my terminal screen looked like an abandoned workbench: one tab for the frontend build, another for the server log…
OWASP Top 10 2025 — 10 Web Security Risks You Must Understand
A few years ago, when I started getting serious about building my own web applications, security still felt like a topic to "learn later." …