MMilan NikicOct 12 · 24 min readXML external entity injection: Secure coding in JavaXML External Entity injection remains a persistent threat in enterprise applications. According to the OWASP Top 10 2025, XXE falls under A02:2025 Security Misconfiguration (CWE-611), reflecting that securitydepth.hashnode.dev
TTSI DEV StudioOct 7 · 4 min readWhy I Built a Decoy Vault for Android PrivacyPrivacy on a phone is not always about hiding everything. Sometimes the harder problem is deciding what you are comfortable showing. While building Xsilent, a privacy-first Android vault for photos, v1tsidevstudio.hashnode.dev
MMira Ezz-EldinSep 10 · 9 min readSecurity Principles - Part III: Hardcoding the Safe ZonesThis article explores one of the most fundamental ideas in security: why secure code cannot save a broken architecture, illustrated through real secure-by-design choices from my graduation project, Inrootshadow.hashnode.dev
AArshadSep 5 · 6 min readHow a Profile Update Feature Could Drain a Company's Bank AccountI was looking at one of the most normal features you can find in almost any application: Update Profile. Nothing exciting. A user changes their name, profile picture, maybe email, and the backend updablog.arshadakl.in
MMira Ezz-EldinAug 30 · 8 min readSecurity Principles - Part II: A System is Not its Intended UseThis article explores one of the most fundamental ideas in security: why green tests mean nothing against a purposeful failure, illustrated through real threat-modeling findings from my graduation prorootshadow.hashnode.dev
MMira Ezz-EldinAug 15 · 10 min readSecurity Principles - Part I: Trust Is Not a FeelingThis article explores one of the most fundamental ideas in security: why systems should trust evidence instead of assertions, illustrated through real design decisions from my graduation project, Instrootshadow.hashnode.dev
ZZeroProtocolAug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 1webpentestingdeepdive.hashnode.dev
NNarges PourkamaliAug 11 · 12 min read10 Rules for Secure Database Schema Design (Before Writing Any Code)My study on secure architecture awareness continues! This time, I examined the most fundamental layer: Database Schema Design. Are you a Back-End Developer? What security considerations do you make wh3safeai.blog
VVictor Wariboko-WestAug 1 · 5 min read7 Security Mistakes Junior Developers Make (And How to Fix Them)Security is not exactly taught in the same way syntax and frameworks are. Most junior developers learn it the hard way: after a bug is reported, a client sends an angry email or a 3 a.m Slack message cybersage.hashnode.dev
KKishore RJul 25 · 6 min readWhat Is SQL Injection? How It Works and How to Prevent ItIntroduction Whether it's usernames, passwords, financial transactions, and customer records, web apps store an incredible quantity of information each day. A lot of these applications utilize databas1kishorecybersec.hashnode.dev
