ATAlex Trayinfreecodecamp.org·1d ago · 18 min readHow to Build an Endpoint Data Loss Prevention Strategy for Your Development TeamA developer's laptop holds more sensitive data than most people realize: API keys, database credentials, staging environment secrets, and sometimes entire copies of production data pulled down "just f00
ZTZero Trust Threadsinzerotrustthreads.hashnode.dev·Sep 7 · 5 min readVulnerability, Threat, and Risk Are Not the Same ThingCybersecurity has a vocabulary problem. Words that have specific meanings are often used interchangeably in casual conversation. Three of the most common are: Vulnerability Threat Risk They are relate00
ZTZero Trust Threadsinzerotrustthreads.hashnode.dev·Sep 7 · 5 min readPorts and Protocols: What Cybersecurity Beginners Actually Need to KnowIf you start studying networking or cybersecurity, you will eventually encounter lists of port numbers. Port 22. Port 53. Port 80. Port 443. Then someone tells you to memorize dozens of them. Before d00
Rrathsarainrr-cyber.hashnode.dev·Sep 5 · 7 min readAnonTestLab: Ten Years, Three Attempts, and One Idea That Wouldn't Let GoTL;DR: the tool is at hashtagrr.github.io/AnonTestLab. The rest of this is how it came to exist. Round one: an idea and no coding experience to build it I got my hands on the Tor Browser almost ten y00
AKAndriy Kovalenkoindeadpacket.hashnode.dev·Sep 4 · 24 min readThe Ransomware Attack Starts Before Encryption: The Warning Signs Security Teams Cannot Ignore in 2026Most people still picture ransomware as a malicious program that suddenly lands on a computer and starts encrypting files. That image is dangerously incomplete. In a modern enterprise attack, encrypti00
Rrathsarainrr-cyber.hashnode.dev·Sep 3 · 11 min readWindows Memory Forensics: Finding a Live Infection with VolatilityPID 1484 had been running since boot. Nothing about that was unusual: it was Explorer.exe, the process every Windows machine on earth is running right now. What was unusual was the process hanging off00
Rrathsarainrr-cyber.hashnode.dev·Sep 3 · 9 min readGNU/Linux Memory Forensics: Is the Compromise Still Live?It's easy to think of memory forensics purely as a hunt for something malicious. On this case, a GNU/Linux server that had already been through a full attack chain, initial access, privilege escalatio00
Rrathsarainrr-cyber.hashnode.dev·Aug 31 · 19 min readOpenID Connect: The Identity Layer OAuth Was MissingBy the time I actually heard the word OIDC, I'd already been through OAuth and PKCE conversations I hadn't fully understood, years apart from each other, and this one arrived even later than those. It00
LDLakshay Dhoundiyalinlakshaydhoundiyal.hashnode.dev·Aug 26 · 10 min readBrowser-in-the-Browser Attack: How Fake Login Windows Steal Real PasswordsImagine you're browsing a website. You click “Sign in with Google.” A familiar login window appears. The logo looks right. The colors look right. The layout looks right. Even the little browser frame 20
CHConnor Harteinconnorhartecybersecurity.hashnode.dev·Aug 26 · 4 min readBTLO: MetaBTLO Meta Challenge: A Hands-On Image Metadata Investigation I recently completed the Meta challenge on Blue Team Labs Online, a digital-forensics exercise focused on image metadata analysis using an 00