Reflected XSS turned 0-click via attribute breakout: autofocus + onfocus. NDA-safe bug bounty log.

There are moments where you sit in front of your screen and genuinely ask yourself: why am I even doing this? Not because the work isn't enjoyable. Not because I don't know what I'm doing. But because

Years back… While I was doing some gardening, I was jumping over a row of bushes along the way. And my phone fell out of my pocket into the brush. I spent hours looking for it, and luckily I found it.

Nowadays, people use AI for many things e.g. research, programming but what about cybersecurity

My close LinkedIn contact, Oswaldo Bello, is looking for a Cybersecurity Lead to join his IT Team at Hola Moda. This is a critical role for the Panamanian market. It is not just about corporate governance;

Welcome to the den where you get to hear tales on how I am building and securing the tech atmosphere in daytime and getting highly caffeinated to break into the systems at night. Officially, I am a DevSecOps

During exercises at CognectCon2025 a number of cyberattack scenarios were discussed that highlighted the risks of cyber attackers leveraging cognitive vulnerabilities to cause major impacts to nation critical

Congrats to INTERPOL for taking down a major cyber information-theft infrastructure! Over 20 thousand Ips/domains were shuttered and 41 servers that contained more than 100GB of sensitive data was seized.

A “Perfect” 10 vulnerability score is not what users of Cisco Ultra-Reliable Wireless Backhaul (URWB) systems were expecting. The recently discovered cybersecurity vulnerability CVE-2024–20418 is remote,

Cybercrime, Investigation, Stroganov Group, Flint, Legal Proceedings, Information Security, Organized Crime, Cybersecurity, Criminal Case, Prosecutor. Title: Tags: #OSINT #criminal_activity #cybercrime

Tools and Techniques for Cognitive Security - a slideshow presentation

The US National Cybersecurity Strategy Implementation Plan fails to address ransomware. There is a real opportunity for the government to make significant progress in crushing the growing scourge of ransomware

... e security+ certification. #dbuzz #hive #cryptography #infosec

Leverage WAX permissions and link auths to minimise the risk of a lost phone or tablet compromising a WAX account.

Quantum-Resistant Cryptography a. Post-quantum cryptography algorithms Post-quantum cryptography refers to cryptographic algorithms designed to be secure against attacks from both classical and quantum

I had a great conversation with Marco Ciappelli and Sean Martin from ITSPmagazine Podcast discussing the mistakes and hard-learned lessons in cybersecurity! They are such characters! A fun and informative

Well folks, it's that time of year again. Time to reflect on the past decade and take a look at the top 5 cybersecurity breaches that had us all on the edge of our seats. And boy, did we have some doozies

Password manager customer data stolen!

A somewhat minimalist approach to technology Recently, I've been sharing a lot about data and OPSEC (Operation Security). In layman terms, OPSEC basically helps to secure yourself from potential threats.

Data is the new currency. And if a product is free, you are the product; A phrase coined by a world-famous American sculptor and video artist Richard Serra in 1973. These days, that phrase is everywhere