#security

PCI DSS Through the Eyes of a Backend Developer

“When I first heard the term PCI DSS, I assumed it was something only auditors and security teams cared about. Then I started working on a…

Solving Gradle metadata and Renovate integration

My current company has settled on using Gradle. It doesn’t make me very happy, but you need to learn to work with constraints. Plus, I must…

We Let AI Fix Security Vulnerabilities in Production. Here Is What Actually Happened.

A practitioner’s account of building an AI-assisted security remediation loop for a multi-tenant SaaS platform: the noise problem, the…

How to Send a Secure Message

Photo by Nik on Unsplash

Your AI-Built App Works. That Doesn’t Mean It’s Safe.

Vibe coding security is the missing layer between a convincing demo and a trustworthy production system. AI can produce a working app in…

Centrality Algorithms: Seven Ways to Find What Matters in a Network

Degree, Betweenness, Closeness, Eigenvector, PageRank, Katz, and Harmonic centrality — explained through intuition, trade-offs, and…

Reactivating Over 1,000 Active Patients With a 5-Day Funnel: A GoHighLevel Build

What a solo dental practice’s silent patient list revealed about funnel design, copy psychology, and automation sequencing.

Crypto Weekly Roundup

Everything That Happened in Crypto This Week: August 9 to August 14

senv: Sandboxed Python environments with the uv workflow

TL;DR: senv keeps the familiar uv workflow but runs package installation and Python code inside an OS-level sandbox. Installs can reach…

AMC Visits on Autopilot — Scheduled, Tracked, and Never Forgotten

It’s 9:00 AM on a Monday, and your phone is vibrating off the desk. Your most valuable client is on the line, furious — a critical machine…

Your AI Agent Has a 1988 Security Problem

The confused deputy is back and this time it speaks natural language. One of the oldest bugs in computer security, rediscovered by people…

3 Questions to Ask Before Signing a Counseling Software Contract

A practical checklist from CollegeFind AI for high school counseling teams evaluating AI-driven platforms

Why We Keep Adding More Apps to Our Workday

There was a time when a team could get most of its work done with email, a phone call, and a few shared documents.

OAuth 2.0, OIDC & JWT Explained: From Basics to Advanced Security

Understanding how OAuth 2.0, OpenID Connect, and JSON Web Tokens fit together — and where security issues can arise.

Essential Equipment and Tools for Moving Heavy Safes

Moving a heavy safe is not a standard furniture relocation; it is an exercise in managing concentrated mass and kinetic energy.

Databricks in the Real World: How Modern Organizations Turn Data into Business Value

Part 9 : Cost Optimization, Security, Career Roadmap & Final Thoughts

Remote Guarding Services in Beaumont, California | Better Access for Growing Communities

Remote Guarding Services for Properties in Beaumont

Remote Guarding Services in Philadelphia, Pennsylvania | Organized Access for Urban Properties

Remote Guarding Services for Properties in Philadelphia

Why Professional Home Security Installation Matters

A neighbor of mine once decided to install his own cameras on a quiet Saturday afternoon to save a bit of money. He mounted everything…

Attack and Security Series: Episode 3

DNS Spoofing: When the Internet Sends You to the Wrong House 🌐🎭

Building a Greenbone/OpenVAS Vulnerability Scanning Lab with Multipass

1. Introduction

The Most Secure Door in Your Building Is Propped Open Right Now

Yii-Permission 3.0 Released: Built for Yii 3.0

In modern web development and enterprise system architecture, a flexible and efficient access control system is the ultimate cornerstone of…

🧠 BloodHound From Beginner to Pro — The Ghostyjoe™ Series

Learn How to Map, Analyze, and Exploit Active Directory Like a Pro

⚙️ Ghostyjoe™ Blackbelt Framework v2 — Full Recon, Scanning, Fuzzing & Cracking Automation

Build a Complete Ethical Hacking Pipeline with Nuclei, FFUF, Naabu, Gowitness & Hashcat

Launching detections.ai Enterprise 🚀

Prove coverage + nail maintenance without the grind

Protect Your PC Daily With Antivirus Pro And Fast Real Time Scanning

Your desktop or laptop faces constant exposure to hidden digital hazards during everyday web browsing, file downloads, and email checks…

HELLO,MY NAME IS PETER

-Petar’s story is a painful reminder of why we must look past a child’s smile and protect them before it is too late.

Why Student Accommodation Security in Edinburgh Should Start Before the First Tenant Arrives

The lock on the front door is useless if the person installing it leaves the back window open. That is more or less the reality for student…

📡 Hashcat Blackbelt — Cracking WPA2 WiFi Like a Pro (Part 3)

By Ghostyjoe™

Think Twice : Before You Ship AI-Generated Code to Production

A real story about Android Keystore, 4 million users, and why “looks correct” isn’t the same as “is safe.”

Who captures the fee layer when capital sets its own security bar

The regulatory bar is a formality. The allocator bar is the real gate.

Passkeys in Keycloak, Part 2: The 26.7 Default Flow (and the Upgrade Trap)

In Part 1 you built passkey support by hand. On Keycloak 26.7 that hand-built flow breaks — passkey users get pushed through 2FA anyway…

Hidden Spy Camera Shop: How to Choose the Right Security Camera for Your Needs

Protecting your house, office, or workplace has never been so essential. A hidden spy camera shop is the only place to find hidden cameras…

Understanding Port Security in IT

In today’s connected world, port security is an essential part of protecting an organization’s network. It helps prevent unauthorized users…

Securing a FlutterFlow Application: A Production-Ready Guide

Introduction

Today’s scary headline (no lie, this is real!): An OpenAI agent hacked HuggingFace!

BBC headline: “OpenAI says its AI went rogue and launched ‘unprecedented’ cyber-attack”.

How Gatehouse Security Keeps Liverpool Student Accommodation and Residential Buildings Safe

Liverpool is home to a huge student population. The city has over 55,000 full-time students, and three-quarters of them need somewhere to…

Sandboxing Script Extensions with GraalVM

Applications increasingly execute scripts that are supplied by customers, loaded dynamically, or generated by AI. This post shows how…

Inteligencia y Ética: El Papel de la Educación en la Seguridad Ciudadana Ecuatoriana

La evolución de la Dirección General de Inteligencia (SENAIN) y la Secretaría de Inteligencia en Ecuador ha estado marcada por una…

Ostium $23.75M Price Report Signer Compromise Exploit (Explained)

On July 15, 2026, Ostium’s OLP vault, the pool backing every trader’s profit and loss, was drained of 23,752,746 USDC. This was not a…

Authentication vs Authorization: The Difference That Breaks Apps

Part 3 of the “Security Engineers Forget” series. They sound the same, they’re abbreviated the same, and confusing them leaves your data…

Hardening a Load-Balanced Nginx + Keycloak + Spring Boot Setup with SSL/TLS

Adding encryption, rate limiting, passive health checks, and enhanced logging to your reverse proxy cluster

Why a Password-Protected LMS Is Not Enough: The Real Risk of Online Course Piracy — and How…

Online educators spend months creating lectures, notes, examinations, books and premium learning materials. However, many education…

⚡ Ash Enters the Johto League, SRE Interviews, and the Day the Battles Finally Began

There is something different about the day when training finally turns into a real battle.

NVIDIA OpenShell: Moving Agent Permissions Out of the Prompt

Give a coding agent a task worth doing and you have handed it your filesystem, your environment variables, your network, and whatever cloud…

Top 5 Security Risks Facing Toronto Businesses in 2026

Michael had spent more than a decade building his family business in Toronto. Every morning he unlocked the front door before sunrise and…

🚨 It Worked in Postman… Why Is the Browser Blocking It?

Understanding the CORS error that confuses every developer

Visualizing the Stack Frame: How Buffer Overflows Actually Work

What is a stack?

What `adb` Can Teach You About Broken Android IPC Protections

When Android developers hear “permissions,” they usually think about camera prompts, location access, notifications, or storage.