Featured Phishing and Social Engineering — How Human Attacks Work and How to Protect Yourself 4 Agustus 2026 Some time ago I was almost tricked. Not because my device is not secure, nor because my password is weak. It all started with one short message that appeared to come from the bank: a login link, a familiar logo, and a sentence urging me to immediately verify … Read article
OWASP Top 10 2025 — 10 Web Security Risks You Must Understand 1 Agustus 2026 A few years ago, when I started getting serious about building my own web applications, security still felt like a topic to "learn later." … →
Container Security for Home Servers — From Docker Rootless to seccomp 29 Juli 2026 A few months ago, I started to get serious about separating services on a home server using Docker. One container for the web, one for th… →
Buffer Overflow — A Simple Explanation for Beginners Who Want to Learn Cyber Security 25 Juli 2026 In the past, when I first read the CTF write-up with the word buffer overflow, I felt like I was witnessing magic: someone could change the… →
XSS (Cross-Site Scripting) — Types, Impact, and How to Prevent It for Developers 24 Juli 2026 Have you ever logged in to a website, then suddenly something strange happened — either a strange popup appeared, your session was lost, or… →
SQL Injection — Demo Attack and Mitigation Methods for Developers 23 Juli 2026 Ever heard the story about a large website being hacked because there was a line of code that they "forgot" to check? In the world of cyber… →
HTTP Security Headers that You Must Install — First Protection Before Exploits Come 23 Juli 2026 There are times when I feel like a website that has been painstakingly built is like a new house: solid foundation, good paint, neat furnit… →
Password Hashing for Developers — Why bcrypt, Argon2, and scrypt are Safer than MD5 23 Juli 2026 Password Hashing for Developers — Why bcrypt, Argon2, and scrypt are Safer than MD5I still remember the days when I first created a login s… →
SSH Hardening for Home Servers — From Key-Based Auth to fail2ban 21 Juli 2026 Some time ago I was idly opening the SSH log on my home server - a used laptop that I used as a server in the corner of my room. What I fou… →
D DNS Poisoning via DNSMasq — Why It Fails in Modern Applications and How to Protect Our Services 12 Juni 2026 Some time ago I told you about DNS router going the wrong way — an incident where VPS1 domain suddenly displays VPS2 content because t… →
