Articles in the Cybersecurity category.
6 articles
- PHP2Shell: Two Critical PHP Vulnerabilities Could Allow Remote Code Execution
PHP has released emergency security patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. Both vulnerabilities have a CVSS score of 9.2 and could allow unauthenticated attackers to execute arbitrary code on vulnerable servers. Developers and system administrators should update to patched PHP versions immediately and investigate potentially
- Bank Hacking in Indonesia: Real Cases, Attack Techniques, and Lessons for Customers and Developers
Secure banking software requires defense in depth. Strong authentication, server-side authorization, reliable transaction processing, continuous monitoring, and regular security testing must work together to protect customer accounts and financial data. Build Security Into the System, Not Just the Login Page.
- 16,000 Supabase Databases Leak Sensitive Data After Misconfiguration
Over 16,000 misconfigured Supabase databases exposed readable tables containing PII, passwords, and auth tokens. The issue stemmed from weak application configurations, especially missing or ineffective row-level security, not a vulnerability in Supabase itself.
- OSINT: The Beginner’s Guide to Open-Source Intelligence
Smart research techniques empower anyone to navigate the online world safely. Open-Source Intelligence is really just smart research. By learning how to use standard search tools, check images, and read public records, anyone can learn to navigate the digital world safely and tell fact from fiction
- 5 Developer Security Mistakes That Caused Real-World Problems
Security isn’t always about sophisticated hackers. Serious vulnerabilities can start with simple mistakes: exposed passwords, unsafe inputs, missing permissions, or overly detailed logs. Security should be part of everyday development, because users may intentionally test your software in unexpected
- Passkeys: A Simpler and Safer Way to Log In
Passkeys are the next step after passwords. Instead of remembering a secret, your device uses cryptography to prove your identity. They resist phishing and credential theft, are unique to each service, and don’t require websites to store your password.