MMuhammad Shahis·Oct 23The Hidden Danger in WordPress: How XML-RPC and Pingback Can Expose Your ServerLearn how WordPress XML-RPC & Pingback features expose servers to brute-force and SSRF attacks, plus practical steps to secure your site.4 min read·httpsportflio-latest-318ave1yf-shahiskhans-projectsvercelapp.hashnode.dev
MMilan Nikic·Oct 12XML external entity injection: Secure coding in JavaLearn how XXE injection works in Java and Spring, which XML parsers are vulnerable by default, and how to configure them securely. Part 1.24 min read·securitydepth.hashnode.dev
TTSI DEV Studio·Oct 7Why I Built a Decoy Vault for Android PrivacyPrivacy is not always about hiding everything. Sometimes it is about choosing what you are comfortable showing.4 min read·tsidevstudio.hashnode.dev1
MMira Ezz-Eldin·Sep 10Security Principles - Part III: Hardcoding the Safe ZonesBreaking down the architectural decisions in a biometric fintech payment system that were made before any vulnerability forced them.9 min read·rootshadow.hashnode.dev
AArshad·Sep 5How a Profile Update Feature Could Drain a Company's Bank AccountHow a simple profile update flaw let users change credits, abuse premium AI agents, and create costly exposure for the platform.6 min read·blog.arshadakl.in
MMira Ezz-Eldin·Aug 30Security Principles - Part II: A System is Not its Intended UseWalking through real STRIDE-driven findings in a biometric fintech payment system and what changes when "does it work" stops being the only question.8 min read·rootshadow.hashnode.dev
MMira Ezz-Eldin·Aug 15Security Principles - Part I: Trust Is Not a FeelingLearn why secure systems verify evidence instead of trusting claims, through lessons from a biometric fintech wallet and Zero Trust design.10 min read·rootshadow.hashnode.dev
ZZeroProtocol·Aug 13Common Web Application TechnologiesLearn how Java, ASP.NET, PHP, Rails, SQL, XML, and SOAP work in web applications and where security weaknesses can appear during web pentesting.7 min read·webpentestingdeepdive.hashnode.dev1
NNarges Pourkamali·Aug 1110 Rules for Secure Database Schema Design (Before Writing Any Code)Designing a secure schema before coding is the foundation of data security throughout the software lifecycle.12 min read·safeai.blog3
VVictor Wariboko-West·Aug 17 Security Mistakes Junior Developers Make (And How to Fix Them)Common security mistakes junior developers make in Node, Express, and React apps — from broken auth checks to SQL injection — with real code fixes.5 min read·cybersage.hashnode.dev
