Featured OWASP Top 10 2025 — 10 Web Security Risks You Must Understand 1 Agustus 2026 A few years ago, when I started getting serious about building my own web applications, security still felt like a topic to "learn later." The important thing is that it has road features, a neat appearance, and a form that can be submitted. It was only when … Read article
Threat Modeling for Beginners — Learn to See Risks Before Gaps Become Problems 31 Juli 2026 Modeling Threats for Beginners — Learn to See Risks Before Gaps Become ProblemsWhen I first started studying security, I thought the sequen… →
Reading CVEs Correctly — From Vulnerability Numbers to Patch Decisions 30 Juli 2026 Reading CVEs Correctly — From Vulnerability Numbers to Patch DecisionsEvery time I open security news, I often see sentences that feel urge… →
Container Security for Home Servers — From Docker Rootless to seccomp 29 Juli 2026 A few months ago, I started to get serious about separating services on a home server using Docker. One container for the web, one for th… →
Buffer Overflow — A Simple Explanation for Beginners Who Want to Learn Cyber Security 25 Juli 2026 In the past, when I first read the CTF write-up with the word buffer overflow, I felt like I was witnessing magic: someone could change the… →
XSS (Cross-Site Scripting) — Types, Impact, and How to Prevent It for Developers 24 Juli 2026 Have you ever logged in to a website, then suddenly something strange happened — either a strange popup appeared, your session was lost, or… →
SQL Injection — Demo Attack and Mitigation Methods for Developers 23 Juli 2026 Ever heard the story about a large website being hacked because there was a line of code that they "forgot" to check? In the world of cyber… →
HTTP Security Headers that You Must Install — First Protection Before Exploits Come 23 Juli 2026 There are times when I feel like a website that has been painstakingly built is like a new house: solid foundation, good paint, neat furnit… →
Password Hashing for Developers — Why bcrypt, Argon2, and scrypt are Safer than MD5 23 Juli 2026 Password Hashing for Developers — Why bcrypt, Argon2, and scrypt are Safer than MD5I still remember the days when I first created a login s… →
SSH Hardening for Home Servers — From Key-Based Auth to fail2ban 21 Juli 2026 Some time ago I was idly opening the SSH log on my home server - a used laptop that I used as a server in the corner of my room. What I fou… →
