2026-06-30T20:46:10Z https://nostr.ae vulny.app https://nostr.ae/npub1utht3rr9q3u4sp299d8p58dhx8075zr65lg2c0jga7a0pmjpdjwspk0hfd https://image.nostr.build/937452a5c8f796ac2e8806f54580f605ee6dc07e4456206eb95a01756c00465b.png https://image.nostr.build/937452a5c8f796ac2e8806f54580f605ee6dc07e4456206eb95a01756c00465b.png https://nostr.ae/nevent1qqsph2tc6ztascgx4mc88dd2phagt9930j4arfpke96eeuxqzday0jszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6a7a9vd Quarter&#39;s review turns up three accounts: a finished contractor, a moved-on manager, and a test login from a launch. All still live. Twenty minutes later, all closed.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-16T14:12:00Z https://nostr.ae/nevent1qqszuvr3fftnkffxhrd7593eeha2vpgcec8aqrfe3j7g7x8e73uyj5gzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf63qw9ng A critical-severity fix just shipped for Vmware Spring For Graphql. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-41699<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-16T00:19:00Z https://nostr.ae/nevent1qqsyhfzajj0kdyc48232e5fscg8wmy99jcpj63nf2e8uh8js4lhe4tszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6up6q6z A brand watched US visitors land on their euro-priced page and bounce. The German and US URLs weren&#39;t cross-referenced in hreflang. One return tag fixed the routing.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-15T16:05:00Z https://nostr.ae/nevent1qqswxfkj30lxyfe94xs5fmx0n7g0ygx7jn8lpgwacjwxsxscpv0tjlgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6ysvlyh A signed URL is a day pass, not a permanent badge. Forgetting to set the expiry is printing day passes with no date — they keep opening the door indefinitely.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-15T12:32:00Z https://nostr.ae/nevent1qqsrkplx8vws9kk37cqllmnjfpkjjgysees2cwdpw2pcq436lpqrlzqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6gn9wwg A security advisory is a good reminder to check your updates.<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/d4adc5e4de255be383617e506cca33213be8d65a0a029ab4fabe604ff0116aaf.mp4"></video> 2026-07-14T15:03:03Z https://nostr.ae/nevent1qqsgh5p3y8ef3wv5qnc62ntvesr47xuhnsj8fyulhjrtuahapum0prszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf67rr83z What does your site show when something breaks in production? If it&#39;s a full stack trace, every visitor sees your internals. Send those details to the logs and give users a clean error instead.<br/><br/>#cybersecurity #infosec #nostr #appsec #websecurity 2026-07-14T02:39:00Z https://nostr.ae/nevent1qqsgrfxeerxa5fstp3992ng4gp4tlzugndgqvkd7cugk2s98czwxq7gzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6fhyts7 Patching your way through a bloated base image is endless. The faster win isn&#39;t fixing the vulnerabilities, it&#39;s removing the packages that have them. You can&#39;t get a CVE in a tool that isn&#39;t installed.<br/><br/>#cybersecurity #infosec #nostr #devsecops #appsec 2026-07-13T19:27:00Z https://nostr.ae/nevent1qqsd5jpl5f7945jphu82hx7ut7nex2lxsvf2lrc6hzv9wgys86kpe0qzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6pqajw2 A metal detector at one entrance does nothing if there&#39;s an unlocked side door. A direct push to main is the side door. Branch protection locks it so everyone walks through the checkpoint you set up.<br/><br/>#cybersecurity #infosec #nostr #devsecops #appsec 2026-07-13T02:44:00Z https://nostr.ae/nevent1qqsx3upnpaz6dzfaa83mx85sfcem6zj8d3wcsqm38edqfkx44t9qqhqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6q5va4c Stop minting IAM users with long-lived keys for your apps. Attach a role instead and let the workload assume it. Roles hand out short-lived creds that rotate themselves, so there&#39;s no static secret to leak.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-13T00:01:00Z https://nostr.ae/nevent1qqs86tp74y2v3q7ng55hga0pq3zp9y8gxjvq2dw9gv34t6pnxpynwjczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6y9ehrh Supply-chain attacks often land through a new version of a package you already trust. A pinned version plus a verified hash means your build takes the bytes you reviewed, not whatever got published since.<br/><br/>#cybersecurity #infosec #nostr #devsecops #appsec 2026-07-12T22:35:00Z https://nostr.ae/nevent1qqs8armh7tc5rcc8dlvm65k3m8q03e6w70put6rgy06slq8049wj43qzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf68qzwhm Here&#39;s a quick site checklist.<br/><br/>#cybersecurity #infosec #nostr<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/2931ea579554af6cd761e8119958aacd02292a615a39be67a5b6d56c63f955dc.mp4"></video> 2026-07-12T22:20:04Z https://nostr.ae/nevent1qqsxrptnuttm63usxssz25rcclhv5p7qs5xahdagerw7zaem9l980rqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6vhuvr5 When did you last check which TLS versions your server still accepts? If 1.0 or 1.1 is on the list, you&#39;re supporting protocols retired years ago. Turn them off and re-test.<br/><br/>#cybersecurity #infosec #nostr #appsec #websecurity 2026-07-12T20:58:00Z https://nostr.ae/nevent1qqst3j8d0wm55a7gwyufkqzpw7kehcmykacdqtglhgdzgzp40elzvgszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf60l8xt4 A critical-severity fix just shipped for Canon Eos Network Setting Tool. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-9261<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-12T18:42:00Z https://nostr.ae/nevent1qqsz6np3cljutnuek5dq4xv6ayhmsngwxxedsed5gmznvrrvlza346szyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6q432rn Logging is the security camera for your cloud. Nobody watches the footage daily, but the day something goes missing, you&#39;re very glad it was recording. Turn it on before you need the tape.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-12T17:21:00Z https://nostr.ae/nevent1qqsvhl0y45x2c9z2e96749e3ss43pzf0gyel7yl9tylcc8cn47elylgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf66qrn3v Your Terraform code is the blueprint; the state file is the photo of the finished building with the keys still in the locks. You&#39;d never leave that lying around. Encrypt it and limit who can pick it up.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-12T14:44:00Z https://nostr.ae/nevent1qqsgnm2p4w7qd2cjyusmx7fcvqqh42qrd7hvfzl0v6zv3vj2l0mfzagzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6c0zlvj A common website myth — and the reality.<br/><br/>#cybersecurity #infosec #nostr<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/0be9667e8e7f5fe1288557137cf53fad6de9c9a1835b92ae2b35979a42438cb1.mp4"></video> 2026-07-12T13:30:05Z https://nostr.ae/nevent1qqsdd7hzgnzjpkvee8dzd5968qm6v86lhg79j4fnngsvfavjsrqwy4gzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6lycydn Structured data is extra notes you hand Google, saying &#34;this is a price, this is a review.&#34; It can&#39;t read your design, so the notes help it show your page off properly.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-12T13:17:00Z https://nostr.ae/nevent1qqs0kltpjnpktqze39a2uyp6ttsp74nj9qnezakx97j4zs9u29h04pgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6z73gk2 North-south rules guard the building&#39;s front door. East-west rules are the locked doors between offices inside. Without them, anyone past the lobby roams the whole floor freely.<br/><br/>#cybersecurity #infosec #nostr #pentesting #networksecurity 2026-07-11T23:35:00Z https://nostr.ae/nevent1qqspkf0ur5ekfz7t7rkafh9hdlxvwqhhqdn9n6ejzef73dnn5cvkwvgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6y7z78z A critical-severity fix just shipped for Mozilla Firefox. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-12293<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-11T22:26:00Z https://nostr.ae/nevent1qqsv4pekp0wzv3r74kakxldexjsz4gh3juf5s4j29q7q3nktgh073aszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6qp9md2 &#34;It&#39;s just input validation, it can&#39;t be a DoS.&#34; The regex doing the validating can be the DoS, if its pattern backtracks badly on a tailored string.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-11T20:36:00Z https://nostr.ae/nevent1qqsznaune7rrjsl5wj0u3c7fq52s9dwhl9x23mtkmfld9ucyn79facszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf63ley0d Paste your URL, run the check, get your fixes — that&#39;s it.<br/><br/>#cybersecurity #infosec #nostr<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/4a944efb37a214b500d06d1e36cc6d84858509cb4022e50312a3827f897c848a.mp4"></video> 2026-07-11T19:46:04Z https://nostr.ae/nevent1qqsgsp0scmp5nxsuahqselv5aa2kpeqty8y7c68k6ulu7drjyzw0vwgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6gg2jpr A SaaS firm targeted a high-volume term with a product page and never cracked page one. The winners were all tutorials. They wrote the tutorial, linked the product inside, and ranked.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-11T18:33:00Z https://nostr.ae/nevent1qqsxn0zhsk9rh0zjg79h9fpafv77nqtyupgm9y2p3f5s7e8aen57aaczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6jxawu3 Can someone craft a link on your domain that quietly forwards to a site you&#39;ve never heard of? If your redirect param isn&#39;t checked, yes, and it borrows your reputation to do it.<br/><br/>#cybersecurity #infosec #nostr #appsec #websecurity 2026-07-11T02:13:00Z https://nostr.ae/nevent1qqsgtnxsvn0nyxv6elzsysx3ygvgumhta4pcz6hqp3ptpx33lnj7atgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf688r997 A team published a deep guide that nothing linked to. Six weeks, no traffic. They added links from five related posts with descriptive anchors, and it started ranking within days.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-11T00:04:00Z https://nostr.ae/nevent1qqsy3mxgz7ckhcn3nxeh3dm3kzhxl4hx6slz8lvlet6ru5yf9j2tudqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6ay8zd9 A critical-severity fix just shipped for Openclaw. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-53861<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-10T22:16:00Z https://nostr.ae/nevent1qqstt9v4mnp2wkvvprze0cvdetym2wm52eu3fnj3y6g77h2shm3fx0czyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6k3sy05 An unowned service account is a key copy left in a drawer for &#34;the machines.&#34; No one remembers cutting it, no one&#39;s responsible for it, and it opens more doors than anybody realizes.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-10T21:39:00Z https://nostr.ae/nevent1qqswze47l8m7zc3vsgg6vm27q0x9m7rhrhrp937zrjrg3fzm50vt0agzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6pshtgh When customers ask AI for a recommendation, is your brand in the answer?<br/><br/>#cybersecurity #infosec #nostr<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/98880e16d6b517bebf57142a9e4d46a3442dc1cb7e9fe943d8cc75350cc16292.mp4"></video> 2026-07-10T19:29:03Z https://nostr.ae/nevent1qqswpvsjp08uld2d2dngzaeh6jpwr3xrnealk7mtf7awzlrnj9hjkwgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6jnxp5w Build a Q&amp;A block: use the customer&#39;s actual wording as the question, answer in the first sentence, keep each answer standalone, and add FAQPage schema. Now it&#39;s both readable and machine-parseable.<br/><br/>#cybersecurity #infosec #nostr #AI #LLM 2026-07-10T18:44:00Z https://nostr.ae/nevent1qqsq38wkf68kzlhqkte79t3wwpra6xmrv4ulyazxz8mw2wrglhcdgqczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf695ldek Reset tokens looked random until someone noticed they tracked server time. Swapping in crypto/randomBytes made them genuinely unpredictable — same length, real entropy.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-10T18:02:00Z https://nostr.ae/nevent1qqsdtku9trg5z5lsfgzz2vrd97xwn9e66t2ejcss55juhc3kk0x45rczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6tvvz6q What a real secret needs: one source of truth, scoped read access, an access log, and automatic rotation. A vault gives all four; a config file in five repos gives none. Pick the vault.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-10T16:28:00Z https://nostr.ae/nevent1qqsqdg46m4tz27rp7lh97rmvj2gmgcuzdp9lhjwq2hf5srxsv98c5yczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6q0pyxe The asset that gets breached is usually the one nobody knew was still running. Orphaned instances don&#39;t get patched because they&#39;re not on anyone&#39;s list. An inventory turns ghosts back into resources.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-10T14:11:00Z https://nostr.ae/nevent1qqsx26xa7zq65a6yqr8nzg0rx0jq2w5y8zd38mnfa70zts4lszahueczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6aq2hqv &#34;We store the cloud key as a masked CI secret, so it&#39;s safe.&#34; Masking hides it in logs, not from a malicious build step or a poisoned dependency. OIDC means there&#39;s no standing key to grab at all.<br/><br/>#cybersecurity #infosec #nostr #devsecops #appsec 2026-07-10T13:26:00Z https://nostr.ae/nevent1qqspk0aff332avanxcmu2wmn8p4jcfv3r0mnp4wqpsrl0knhtyzetyszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf69ez7sa XXE feels like a dusty old bug, yet XML hides inside SVGs, office docs, and SOAP everywhere. If you parse any of those, the default-on entity resolution still bites.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-10T01:05:00Z https://nostr.ae/nevent1qqsvsvwqa994s0zmkfh0sxsqdn74uwz0cycgw3gwywwl2fave43nq4qzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6348678 Security, SEO and AI in one daily check, one price.<br/><br/>#cybersecurity #infosec #nostr<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/d54d147ef4ac635e00eee8a6eb07f1bbfc32d8f9bbb1c031801a3a242ed7182d.mp4"></video> 2026-07-09T18:13:04Z https://nostr.ae/nevent1qqs0a9lxlvzpdr7q7hf5m5c2tta93fgh93et3udcl2f5ury93pge86gzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6vuwcnh A signed link is a temporary pass anyone holding it can use. If you don&#39;t set when it stops working, it keeps letting people in forever. Give it a short shelf life.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-09T18:12:00Z https://nostr.ae/nevent1qqsqg3eg8kvjelqgw5xxh3ae9xsqf35qlejf8aykpcys7eewp2lw2rczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf67nrs09 A critical-severity fix just shipped for Google Android. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-0126<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-09T15:26:00Z https://nostr.ae/nevent1qqstzql779d3xqetlnw5qgw3lyawtdgy9qsl8lhshf024ve0rnav6tczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6j8t2j3 Reusing one password everywhere is one key for your house, car, office, and safe. Lose it once and you&#39;ve lost all four at the same time. Different locks need different keys.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-09T02:18:00Z https://nostr.ae/nevent1qqsqdzpkaexmfge2eh6cs89ks0la9qfg8ru684w63r99d2z4m5lzmcszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf65rj4ls Don&#39;t disable accounts &#34;eventually after the handover.&#34; Cut access on the last day and grant temporary access back if you truly need something. Default-off is safer than default-on-just-in-case.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-09T01:21:00Z https://nostr.ae/nevent1qqswnf9hna58lmjjp3mskfpaw9m4lcjgnd32u9nsvfsfkeqlken0nnczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf64d4pn8 Password managers fail on rollout, not on tech. People stall on importing old logins and fighting autofill. Smooth those two steps and adoption climbs without a single extra lecture.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-08T23:04:00Z https://nostr.ae/nevent1qqsg50saxkluvyeyk47v0ccguq7a2uyrguetwf50d528z9mvmcq7kjqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6xez2vp The page-one results are Google&#39;s published answer to what searchers want. If every result is a list and yours is a single product, no amount of polish fixes that mismatch.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-08T21:56:00Z https://nostr.ae/nevent1qqsvu3tp9vg5p8nj8mjqycp83ck6lpzmjh89wqej23yfpy09dq5fsxgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf66san5a Good starter SCPs: deny disabling CloudTrail, deny leaving your approved region list, and deny relaxing public-access blocks. Apply at the org root. These are limits no single account should be able to undo.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-08T21:29:00Z https://nostr.ae/nevent1qqs0z6v9m0jaamg0gmfhwndpwwzwegz4eletahemaj67x2636kazk6czyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6wzsn22 The mistake almost every team makes: copying a policy from one service to the next because it &#34;worked.&#34; Now five services share permissions only one of them needed. Write each policy fresh.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-08T19:00:00Z https://nostr.ae/nevent1qqstg2pud2lm09k3uzwk07sf0sleyetaa74l2wmvy80chn46dz6wczgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6m35du5 XSS isn&#39;t about bad input alone; it&#39;s about unencoded output. The same string is harmless in a database and dangerous in HTML. The fix lives at the render step, where you encode for the context.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-08T18:02:00Z https://nostr.ae/nevent1qqsqru2nkhd3fa8lpvvyx4w7s2f4cghdf4g9afdqq2rhctnqy9vu7kszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf626970j An old shopping site got breached and one staffer&#39;s password leaked. It was the same one he used for work email. The attacker didn&#39;t break in; they just logged in.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-08T16:57:00Z https://nostr.ae/nevent1qqsq8jmhehar5wqxyk6hs3wr9ulxtags60jkw7pu8pqtsg6sdy3lqqqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6s06qws A report-it path is the fire alarm on the wall. It works because everyone knows where it is and that pulling it brings help, not a lecture about why you pulled it.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-08T15:49:00Z https://nostr.ae/nevent1qqsy6sy6yj94rfch6ka466m2jzfgtvt2aznleet2rfnztnrufv7lljszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6c2xeaj Not sure which data rules apply to your website?<br/><br/>#cybersecurity #infosec #nostr<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/6e548bb8acbae199f40b859841f365fa4fdd6570bbb754cbc299f9fead9d7dae.mp4"></video> 2026-07-08T15:28:03Z https://nostr.ae/nevent1qqs249d8rxt4g966t5t9m5r66ua2anr0xzyu9jc064qk526s0quudzqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6enmzh6 The error big sites repeat: leaving every filter, sort and pagination combo open to crawling. Pick the URLs worth indexing and tell Google to skip the rest.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-08T14:22:00Z https://nostr.ae/nevent1qqs9tsmdg98zejyrcaatu94056fs94xg0986esesc2wt60zpte5hqwqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6yg65v3 A critical-severity fix just shipped for Wso2 Api Manager. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-2053<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-08T02:23:00Z https://nostr.ae/nevent1qqs90jzn0jwmt0a3zh6crlqhmnnrj0fmfmyc0zgl4ga376359t8kcrqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6zj6aew When someone asks AI &#34;what is [your category term],&#34; whose definition does it repeat? If it isn&#39;t yours, you&#39;ve left the most basic, high-intent question in your space for a competitor to own.<br/><br/>#cybersecurity #infosec #nostr #AI #LLM 2026-07-08T01:07:00Z https://nostr.ae/nevent1qqs243yteltevjd4naz5cpdly2t983tzjjvk9ng78lamge0y2lqcd8qzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6fwh7c5 Can a stranger query your GraphQL endpoint and get your entire schema back? With introspection left on in prod, one request returns every type and field you have.<br/><br/>#cybersecurity #infosec #nostr #appsec #websecurity 2026-07-07T23:57:00Z https://nostr.ae/nevent1qqsf2vwvn0kvkc43ktjc2sysxu7fca7sa0yg205yjy8y9txfs59umaqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6u3jate Good security saves you cleanup, downtime and stress later.<br/><br/>#cybersecurity #infosec #nostr #security #compliance<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/40b93fb3d0ae210397f5104c27299b1125797eb0ed5c0e9ab9437a2874fae096.mp4"></video> 2026-07-07T23:02:03Z https://nostr.ae/nevent1qqszz49ehukey68rd54dx8retvjdxlgnz9t4f797h3gt20j08fpqu8gzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6rgunut Pruning pass: list pages with no traffic or links in 12 months, then refresh, merge, or 410 each. Redirect anything with backlinks. Recheck the whole site once a year.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-07T21:34:00Z https://nostr.ae/nevent1qqsw2scl588yh8kan5fycqj2z3t5ctzd7x98xfw5usw87f42ks783agzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6y00857 An avatar loader took a path param directly. A traversal string pulled a file it shouldn&#39;t. Resolving the path and checking it stayed under /uploads shut it down.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-07T20:49:00Z https://nostr.ae/nevent1qqsx3c0gr3gvxzwl6jlxj8hsqtyaw37z32j74qc3cxxsxeqwkpvnvqgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6zcumtw A library&#39;s CDN account gets popped on a Friday. Sites with SRI hashes on that script just see it fail to load. Sites without quietly ship the attacker&#39;s version all weekend.<br/><br/>#cybersecurity #infosec #nostr #appsec #websecurity 2026-07-07T19:02:00Z https://nostr.ae/nevent1qqsp9h59xhh6t0q8llpr86p60hakzhxcv474m8peh39g3jq6e566cegzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6rw80gs Manual patching feels responsible and usually isn&#39;t. Good intentions slip; automation doesn&#39;t. For security updates specifically, hands-off beats the patch schedule you keep missing.<br/><br/>#cybersecurity #infosec #nostr #serversecurity #sysadmin 2026-07-07T18:16:00Z https://nostr.ae/nevent1qqsv9hy46q9s8zg2q60pwz660r6uj5kux53fetnr4pay9a60adfk83czyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6ptn8we Does your homepage load on four URLs at once, with and without www, with and without a slash? To Google that can look like four pages competing with each other.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-07T16:46:00Z https://nostr.ae/nevent1qqsxu30gesz4cj99p857jngkcdpkr2crgtrce8362xw9y6nw8h089qszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6svjz92 A review of connected apps turns up an analytics tool nobody&#39;s used in a year, still granted full read access to the inbox. One click revokes it. The door was open the whole time.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-07T14:53:00Z https://nostr.ae/nevent1qqstj0c88rqczew43yu2xjjuc94t56jrznpuwtu3yrxhepvsm64hm9szyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6tvl77y Most website trouble starts with one small, overlooked thing.<br/><br/>#cybersecurity #infosec #nostr #privacy #opsec<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/564dc57a8760d9b431560e74ff62ba815b0cb695989f19cdadf810a3cedd0401.mp4"></video> 2026-07-07T13:42:03Z https://nostr.ae/nevent1qqstk0hny02wyndnk8wm94lk4kechva96zfdtvq4rdwnfxgrlvr4f6qzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6ypcsxl Picture folders as rooms. ../ means &#34;go up one room.&#34; If a user&#39;s filename can say that, they can wander into rooms you never meant to open. Check the final room.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-07T13:36:01Z https://nostr.ae/nevent1qqs9nl5ld4g7w50n9fedkk56fz3p3r6d0cyfcuvdc7p3azaw86tljuczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6jst395 Building an llms.txt? List your product, docs, pricing, and top guides as markdown links with one-line summaries. Skip the fluff. Point to the page that answers, not the homepage.<br/><br/>#cybersecurity #infosec #nostr #AI #LLM 2026-07-07T13:07:00Z https://nostr.ae/nevent1qqs8ls04q9qx565026pk8kneuml673ul68khm836djqk4kmyj2vrfeqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6htjpkc Answer the question being asked, not the one you wish was asked. If people query &#34;how much does X cost,&#34; give a number range up top, not a pitch about your value. AI rewards the direct match.<br/><br/>#cybersecurity #infosec #nostr #AI #LLM 2026-07-07T02:01:00Z https://nostr.ae/nevent1qqsf0k4p8kqdqc7q7hcwyuf2hs5ljhkzelhz89jurrtykav9ysptaygzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6v5pz55 Why is &#39;root&#39; the most attacked username on Earth? Because it exists everywhere and owns everything. Disable direct root SSH and that universal target disappears.<br/><br/>#cybersecurity #infosec #nostr #serversecurity #sysadmin 2026-07-07T01:14:00Z https://nostr.ae/nevent1qqsprq2glle46wgagllz4hm7xu0nl2r89yma35p6s3ml08drstyaawgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6klaerg A security advisory is a good reminder to check your updates.<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/4c52e0d3c4a97b9ed4d519cb3025ed573f5a334ae770ebf61e3a1770956bc751.mp4"></video> 2026-07-07T00:43:03Z https://nostr.ae/nevent1qqs279uq8wqc559gkcwt8fqtk3l8uuz9ezlhustthmjdemtrmvzffmszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6ekmr0s Image SEO pass: WebP or AVIF format, dimensions set to prevent layout shift, descriptive alt text, lazy-load below the fold, real filename not IMG_4821.jpg.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-07T00:24:00Z https://nostr.ae/nevent1qqsql5rrllurvuv8adkw5curggczc2syjtlwtpvnet6yt267du72nwczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6xpz3ux Logged-in is not the same as allowed. If a user changes the account ID in the request, does your code re-check ownership, or just hand the data over?<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-06T22:18:00Z https://nostr.ae/nevent1qqsd4epm266fl47758x3h6qnkpytp8pwzrm9l45d6tyrs8p2pxm2uxgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6mxjtht The mistake almost everyone makes: building great CI security gates, then leaving main open to direct pushes. The gates guard the PR path while a wide-open side path runs right past all of them.<br/><br/>#cybersecurity #infosec #nostr #devsecops #appsec 2026-07-06T21:50:00Z https://nostr.ae/nevent1qqstdvaz43ucfjl47j4n8tg42hs6ejjhtsd9efmwd8uvx57858qhcmqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6ry4jl5 Give each person and tool the one thing they need to do their job, nothing spare. When an account gets misused, least privilege decides whether it&#39;s an annoyance or a disaster.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-06T19:57:00Z https://nostr.ae/nevent1qqsta5833wntu6ejfga428hkp4ve6suxura6hkfl68p6yevxjckgppczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf66nal08 A critical-severity fix just shipped for Ibm Websphere Extreme Scale. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-13773<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-06T18:44:00Z https://nostr.ae/nevent1qqsvpevklyg9vjnuz55fxq98dsp7szc84rqgwk9qh2c3luyhzfhpfuqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6mw5drj If a random USB stick showed up on a desk labeled &#34;payroll,&#34; how many people would plug it in to see? Curiosity is the whole attack. The answer should be zero, and that takes telling.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-06T17:03:00Z https://nostr.ae/nevent1qqs06247xtccd983dwl4kcmzgy7vmmmkmejynd2yvcsg7n8lk58wgfgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf66wfpmq A long password isn&#39;t the answer to SSH brute force. Even a great one is still guessable in principle and reusable if leaked. Keys remove the guess entirely. Just use keys.<br/><br/>#cybersecurity #infosec #nostr #serversecurity #sysadmin 2026-07-06T16:18:00Z https://nostr.ae/nevent1qqs87tqk2c3ssvm3gv3gvd6u9d5axc529jckkcf083uuxhrm84uqgcqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6hc2rlx You sign for a package so the courier knows it&#39;s really you. Signing an artifact is the build saying &#34;this is mine.&#34; Verifying at deploy is the door checking the signature before letting the box inside.<br/><br/>#cybersecurity #infosec #nostr #devsecops #appsec 2026-07-06T15:25:00Z https://nostr.ae/nevent1qqsf9t3vzrmrdgsc4t87qhak5zcmv3vld8dk88w9egm7ztpj0kpnutczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6qtsjm5 Can a laptop on your guest wifi reach the server running your business? If you&#39;re not sure, treat that as a yes until you&#39;ve checked. Flat networks connect everything to everything.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-06T13:39:00Z https://nostr.ae/nevent1qqsg2925aeftu4rvca9gz3n4u0fzelxxsmf5tqfy28le498ppqhyd8szyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6q454v9 Treat an urgent voice call from &#34;the boss&#34; like any other unverified request. A cloned voice can sound exactly right. Confirm big asks through a channel you already trust, not the call itself.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-06T13:05:00Z https://nostr.ae/nevent1qqspqrq9d7ys8gmstptlx7d0d7ej7fzj8c5880lr5c5fs2gydaqaqrczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6pa6h7v Your app borrows code from other people&#39;s packages. Sometimes one of those gets a fix. An audit is just asking, &#34;any of my borrowed parts need the new version?&#34; Then you update them.<br/><br/>#cybersecurity #infosec #nostr #appsec #websecurity 2026-07-06T02:52:00Z https://nostr.ae/nevent1qqst0ud6g0545kmxp7um2r4xs4937mrdwn4cw4zklrpf2ecrttuu9fszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6cy5har &#34;Just disable SELinux, it breaks things.&#34; It breaks things because it caught something. The fix is usually one policy tweak, not turning it off.<br/><br/>#cybersecurity #infosec #nostr #serversecurity #sysadmin 2026-07-06T00:49:00Z https://nostr.ae/nevent1qqsf3e7g8dms2r4cksc965xeellxrcra38rtzu8ua7zcmkj4ue3sz9czyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6483vnu A critical-severity fix just shipped for Litellm. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-49468<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-05T22:35:00Z https://nostr.ae/nevent1qqsdztu67ppfsvhzxksjjwfe03tjkwxs0tcaxyu6cppc7npquvsyurczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf62xzjzl Build your asset list from four places: your DNS records, your cloud console, your password manager, and the SaaS invoices in accounting. Cross those and you&#39;ll find logins you forgot existed.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-05T21:01:00Z https://nostr.ae/nevent1qqsrm470ally5u45pgxwcxvupzp52n8f0l7zsm73yuk6p8afc04f4cqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6e27z6t An access key is a password your code uses. Like any password, the longer it lives, the more places it can slip out. Rotation just means swapping it for a fresh one on a regular beat.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-05T18:11:00Z https://nostr.ae/nevent1qqsff25qgv0nrxxgzrl4s83fvgjlhy27q6zl63thta50untge049jtqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6jvjp3n A quick website health check looks at updates, logins and settings.<br/><br/>#cybersecurity #infosec #nostr #pentesting #networksecurity<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/47ae6260b71938bb837c9a8e4202204a89d5041a270479b28724be4fe60d70fe.mp4"></video> 2026-07-05T16:36:03Z https://nostr.ae/nevent1qqstqzu36eljurvfud04mt6ffx6vqh30ehzys8622zg4jx2wrae886qzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6vhc0r8 Open faceted nav is a copier stuck on. One category page becomes a thousand slightly different copies, and Google has to sort the originals from the noise.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-05T15:59:00Z https://nostr.ae/nevent1qqsg67xrqek0e7ql28p4xdc6mglsppqjrqshax0ml3e8h5jqe6psqcczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6x5n08e Database hygiene: bind to localhost or private subnet, block the DB port at the firewall, require auth, never tunnel it raw to the public internet. App talks to DB privately.<br/><br/>#cybersecurity #infosec #nostr #pentesting #networksecurity 2026-07-05T15:32:00Z https://nostr.ae/nevent1qqsd5y8p0y79su263frtl373hz09alux3wah7d9f833vey8m756urjgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6vauunt Log connections to your exposed ports and actually watch them. A sudden spike of attempts on a service is your early warning. You can&#39;t respond to what you never recorded.<br/><br/>#cybersecurity #infosec #nostr #pentesting #networksecurity 2026-07-05T13:46:00Z https://nostr.ae/nevent1qqsvwx5f790u2xw22sq2267sxg2w5ln0y7e9mlvttmumszrluvdasegzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6flutg4 You don&#39;t need enterprise gear to start. Even your basic router&#39;s guest network is a free first split. Perfect segmentation can wait; getting visitors off your main network shouldn&#39;t.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-05T02:08:00Z https://nostr.ae/nevent1qqsg9raewhwyhwuknjwaj857z3x8pc0v4t5khun7zcd2uqzcyn28yrczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf69kkgen Put internal tools behind a VPN, not a public port. Dashboards, staging sites, databases, admin consoles. If only staff should reach it, only the VPN should expose it.<br/><br/>#cybersecurity #infosec #nostr #pentesting #networksecurity 2026-07-05T00:37:00Z https://nostr.ae/nevent1qqs99z6tfrlermdmnmhu9nf8d2xj2epycj5pf8wfhrffeem539qf89gzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf67gq6k9 Share Vulny and earn a referral commission.<br/><br/>#cybersecurity #infosec #nostr<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/aeb5a3013e293b095b22adf828eb626e438126f5b88b5107ef498f6c91d38f21.mp4"></video> 2026-07-04T22:55:02Z https://nostr.ae/nevent1qqsy5hxaqwg3ak7t5455y70k7tl6svjxn80ewwhagxlt6xzhu7tk9kqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf65jfasf An employee&#39;s password showed up in a leaked list and someone tried it at 3am. The login prompt asked for a code on her phone. No code, no entry. She slept through the whole thing.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-04T22:40:00Z https://nostr.ae/nevent1qqsgg9factpyvzk4m6awth74m2ydd4zvzq44zmy9z5pvqm4asepvfdszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6a0ceug Turn on authentication for Redis, Memcached, and Elasticsearch. Several ship with no password by default. An exposed instance with auth off lets anyone who reaches the port read and wipe it.<br/><br/>#cybersecurity #infosec #nostr #pentesting #networksecurity 2026-07-04T20:28:00Z https://nostr.ae/nevent1qqs8gzdjmvhtuee4rkk0fv8h4q7wqcchygwwc68d5hk24gcs2phxurszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf66594rz Two pages targeting the same phrase don&#39;t double your odds. They split your authority, and Google often ranks the weaker one, leaving your best page on page two.<br/><br/>#cybersecurity #infosec #nostr #seo #marketing 2026-07-04T19:24:00Z https://nostr.ae/nevent1qqsr3efeeg4dxxg3cjjpa6nustyvszqe9punxghtp4rs686y002yfrqzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6xs69dv Here&#39;s a quick site checklist.<br/><br/>#cybersecurity #infosec #nostr<br/><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://video.nostr.build/997b71433c36db8a9ee07a39847d9e94f5f33e1a9f351585856f71913efd8a49.mp4"></video> 2026-07-04T17:02:03Z https://nostr.ae/nevent1qqsx6pnksvjzqcnpcyx3m5cw869wq3t90z5hfn3j3c3mkft9nwrh24szyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6zgfxhg Tags are sticky labels on your cloud stuff: who made it, what it&#39;s for, how sensitive it is. With labels, you can find and protect things. Without them, every resource is an anonymous mystery box.<br/><br/>#cybersecurity #infosec #nostr #cloudsecurity #devsecops 2026-07-04T16:00:00Z https://nostr.ae/nevent1qqsw2a7svl06aapxjs0pjhezwrmh6yvnjgrxecx3dnfeat3elyj4s7qzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6vwadkk Before you blanket-block bots, decide which AI crawlers you want citing you. If you disallow GPTBot and ClaudeBot in robots.txt, don&#39;t be surprised when those engines never mention your brand.<br/><br/>#cybersecurity #infosec #nostr #AI #LLM 2026-07-04T15:37:00Z https://nostr.ae/nevent1qqszn37gy3djh47xmhgue03ja90hemz66fgdpsfppfu3mtffrjywrqszyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf69mxuyn A critical-severity fix just shipped for Vowpalwabbit Vowpal Wabbit. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-44723<br/><br/>#cybersecurity #infosec #nostr #cve #vulnerability 2026-07-04T13:37:00Z https://nostr.ae/nevent1qqs94ghs9vqc3zr2z6tpnszjcuhyvvms4t552uuvkktxjx7w49a0kzgzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6039pm7 If someone clones your repo right now, how many live credentials do they get for free? Run a secret scanner across the full history. The count is rarely zero, and every hit needs a rotation.<br/><br/>#cybersecurity #infosec #nostr #devsecops #appsec 2026-07-04T02:31:00Z https://nostr.ae/nevent1qqsytfdpdz3h9c80setdnw9c3grxkhgm5xn35zv3up428ndpuwat32szyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6n6pvcf &#34;Cookies are encrypted over HTTPS, so they&#39;re safe.&#34; HTTPS protects them in transit, not from a script on your own page. HttpOnly is what keeps client-side JavaScript from reading the session token.<br/><br/>#cybersecurity #infosec #nostr #appsec #owasp 2026-07-04T01:11:00Z https://nostr.ae/nevent1qqsf7aaldwph5dttf0j2n796vlng9tfa9ewr30xzl2qklj0l04jfwggzyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf62lv3jz &#34;Allow from anywhere&#34; is the lazy default that quietly maximizes your exposure. Spend two minutes scoping each rule to who needs it. Least privilege applies to ports, not just users.<br/><br/>#cybersecurity #infosec #nostr #pentesting #networksecurity 2026-07-04T00:10:00Z https://nostr.ae/nevent1qqswqf3dcg87czpj3chelnamw7rszqgu4kt8tmfpfg7u4j8rerd6g5czyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf66djhyu Buildings post fire exits before there&#39;s a fire, not during. An incident plan is the same idea. You want the map on the wall long before the room fills with smoke.<br/><br/>#cybersecurity #infosec #nostr #security #compliance 2026-07-03T22:05:00Z https://nostr.ae/nevent1qqsymnc0t3nw69da9srmuuenfmfzff6sjxmqyv7pl4ll9kdv5ge5t3czyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf60f6ne2 Verifying a payment request is checking the peephole before you open the door. The knock might be exactly who it claims. A two-second look costs nothing and ends the doubt.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-03T21:34:00Z https://nostr.ae/nevent1qqstgnpw7sdv5zfcdah0ketndpzt3gv92w0sa2qfqhc6kn56l33gjvczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6rn72dx The mistake almost everyone makes: locking down files but leaving unencrypted swap and open core dumps, the two places memory secrets quietly land.<br/><br/>#cybersecurity #infosec #nostr #serversecurity #sysadmin 2026-07-03T19:53:00Z https://nostr.ae/nevent1qqszr6pe87ldlt974qcwwnxdykd5vkjmg904lcanf3cfrtel6dqplqczyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf6j8e3up A fake login page asks for the password and the texted code. The employee types both. With SMS, the attacker walks in. With a passkey, there&#39;s no code to hand over, so the trick fails.<br/><br/>#cybersecurity #infosec #nostr #phishing #awareness 2026-07-03T19:22:00Z https://nostr.ae/nevent1qqs25kvytdw3trfk2hns3l99l8q5s03pru0z4829sejsxajd7dq0u0czyr3wawyvv5z8jkq9g545uxsakucal6sg02naptp7frhm4u8wg9kf65vxlpj If a user renamed a script to photo.jpg and uploaded it, what would your server do with it? If it trusts the extension, that&#39;s a problem. Check the real content type before you accept anything.<br/><br/>#cybersecurity #infosec #nostr #appsec #websecurity 2026-07-03T17:14:00Z