vulny.app
Vulny.app

🔍 Vulnerabilities · ⚙️ SEO · 🤖 GEO/AI-search
Protecting businesses across the globe 🌐

Public Key

npub1utht3rr9q3u4sp299d8p58dhx8075zr65lg2c0jga7a0pmjpdjwspk0hfd

NIP-05 Address

Profile Code

nprofile1qqsw9m4c33jsg72cq4zjkns6rkmnrhl2ppa2059v8eywlwhsaeqke8gpp4mhxue69uhkummn9ekx7mqpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqudyqz

Publishing to

Author Public Key

npub1utht3rr9q3u4sp299d8p58dhx8075zr65lg2c0jga7a0pmjpdjwspk0hfd

Show more details

Last Notes

2026-07-18 02:00:00 UTC

A team swore their new section was indexed. The logs said Googlebot had never once requested it. A missing internal link was the whole problem, found in ten minutes.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-18 00:12:00 UTC

"Just give it admin, we'll lock it down later." Later never comes, and that role outlives three engineers. Start narrow. Widening a policy takes a minute; nobody ever circles back to shrink one.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-17 18:50:04 UTC

Not sure which data rules apply to your website?
#cybersecurity #infosec #nostr
https://video.nostr.build/b8cd03dba1a2da56d002b6767b10335eb156262049889ba8f42b493ba358af6b.mp4

2026-07-17 15:54:00 UTC

A bastion host doesn't store the keys to your fleet. It just brokers the hop, so a breach there still leaves the real targets behind a second gate.
#cybersecurity #infosec #nostr #serversecurity #sysadmin

2026-07-16 23:19:00 UTC

Set a clear removable-media rule: no unknown USB drives in work machines, use approved sharing tools for transfers, hand found devices to IT, and disable autorun on company laptops.
#cybersecurity #infosec #nostr #phishing #awareness

2026-07-16 20:37:00 UTC

Is your network printer or IP camera reachable from the internet? A lot of them expose web panels with factory passwords. Tuck them behind the firewall on an isolated segment.
#cybersecurity #infosec #nostr #pentesting #networksecurity

2026-07-16 14:12:00 UTC

Quarter's review turns up three accounts: a finished contractor, a moved-on manager, and a test login from a launch. All still live. Twenty minutes later, all closed.
#cybersecurity #infosec #nostr #phishing #awareness

2026-07-16 00:19:00 UTC

A critical-severity fix just shipped for Vmware Spring For Graphql. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-41699
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-15 16:05:00 UTC

A brand watched US visitors land on their euro-priced page and bounce. The German and US URLs weren't cross-referenced in hreflang. One return tag fixed the routing.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-15 12:32:00 UTC

A signed URL is a day pass, not a permanent badge. Forgetting to set the expiry is printing day passes with no date — they keep opening the door indefinitely.
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-14 15:03:03 UTC

A security advisory is a good reminder to check your updates.
#cybersecurity #infosec #nostr #cve #vulnerability
https://video.nostr.build/d4adc5e4de255be383617e506cca33213be8d65a0a029ab4fabe604ff0116aaf.mp4

2026-07-14 02:39:00 UTC

What does your site show when something breaks in production? If it's a full stack trace, every visitor sees your internals. Send those details to the logs and give users a clean error instead.
#cybersecurity #infosec #nostr #appsec #websecurity

2026-07-13 19:27:00 UTC

Patching your way through a bloated base image is endless. The faster win isn't fixing the vulnerabilities, it's removing the packages that have them. You can't get a CVE in a tool that isn't installed.
#cybersecurity #infosec #nostr #devsecops #appsec

2026-07-13 02:44:00 UTC

A metal detector at one entrance does nothing if there's an unlocked side door. A direct push to main is the side door. Branch protection locks it so everyone walks through the checkpoint you set up.
#cybersecurity #infosec #nostr #devsecops #appsec

2026-07-13 00:01:00 UTC

Stop minting IAM users with long-lived keys for your apps. Attach a role instead and let the workload assume it. Roles hand out short-lived creds that rotate themselves, so there's no static secret to leak.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-12 22:35:00 UTC

Supply-chain attacks often land through a new version of a package you already trust. A pinned version plus a verified hash means your build takes the bytes you reviewed, not whatever got published since.
#cybersecurity #infosec #nostr #devsecops #appsec

2026-07-12 22:20:04 UTC

Here's a quick site checklist.
#cybersecurity #infosec #nostr
https://video.nostr.build/2931ea579554af6cd761e8119958aacd02292a615a39be67a5b6d56c63f955dc.mp4

2026-07-12 20:58:00 UTC

When did you last check which TLS versions your server still accepts? If 1.0 or 1.1 is on the list, you're supporting protocols retired years ago. Turn them off and re-test.
#cybersecurity #infosec #nostr #appsec #websecurity

2026-07-12 18:42:00 UTC

A critical-severity fix just shipped for Canon Eos Network Setting Tool. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-9261
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-12 17:21:00 UTC

Logging is the security camera for your cloud. Nobody watches the footage daily, but the day something goes missing, you're very glad it was recording. Turn it on before you need the tape.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-12 14:44:00 UTC

Your Terraform code is the blueprint; the state file is the photo of the finished building with the keys still in the locks. You'd never leave that lying around. Encrypt it and limit who can pick it up.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-12 13:30:05 UTC

A common website myth — and the reality.
#cybersecurity #infosec #nostr
https://video.nostr.build/0be9667e8e7f5fe1288557137cf53fad6de9c9a1835b92ae2b35979a42438cb1.mp4

2026-07-12 13:17:00 UTC

Structured data is extra notes you hand Google, saying "this is a price, this is a review." It can't read your design, so the notes help it show your page off properly.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-11 23:35:00 UTC

North-south rules guard the building's front door. East-west rules are the locked doors between offices inside. Without them, anyone past the lobby roams the whole floor freely.
#cybersecurity #infosec #nostr #pentesting #networksecurity

2026-07-11 22:26:00 UTC

A critical-severity fix just shipped for Mozilla Firefox. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-12293
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-11 20:36:00 UTC

"It's just input validation, it can't be a DoS." The regex doing the validating can be the DoS, if its pattern backtracks badly on a tailored string.
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-11 19:46:04 UTC

Paste your URL, run the check, get your fixes — that's it.
#cybersecurity #infosec #nostr
https://video.nostr.build/4a944efb37a214b500d06d1e36cc6d84858509cb4022e50312a3827f897c848a.mp4

2026-07-11 18:33:00 UTC

A SaaS firm targeted a high-volume term with a product page and never cracked page one. The winners were all tutorials. They wrote the tutorial, linked the product inside, and ranked.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-11 02:13:00 UTC

Can someone craft a link on your domain that quietly forwards to a site you've never heard of? If your redirect param isn't checked, yes, and it borrows your reputation to do it.
#cybersecurity #infosec #nostr #appsec #websecurity

2026-07-11 00:04:00 UTC

A team published a deep guide that nothing linked to. Six weeks, no traffic. They added links from five related posts with descriptive anchors, and it started ranking within days.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-10 22:16:00 UTC

A critical-severity fix just shipped for Openclaw. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-53861
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-10 21:39:00 UTC

An unowned service account is a key copy left in a drawer for "the machines." No one remembers cutting it, no one's responsible for it, and it opens more doors than anybody realizes.
#cybersecurity #infosec #nostr #phishing #awareness

2026-07-10 19:29:03 UTC

When customers ask AI for a recommendation, is your brand in the answer?
#cybersecurity #infosec #nostr
https://video.nostr.build/98880e16d6b517bebf57142a9e4d46a3442dc1cb7e9fe943d8cc75350cc16292.mp4

2026-07-10 18:44:00 UTC

Build a Q&A block: use the customer's actual wording as the question, answer in the first sentence, keep each answer standalone, and add FAQPage schema. Now it's both readable and machine-parseable.
#cybersecurity #infosec #nostr #AI #LLM

2026-07-10 18:02:00 UTC

Reset tokens looked random until someone noticed they tracked server time. Swapping in crypto/randomBytes made them genuinely unpredictable — same length, real entropy.
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-10 16:28:00 UTC

What a real secret needs: one source of truth, scoped read access, an access log, and automatic rotation. A vault gives all four; a config file in five repos gives none. Pick the vault.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-10 14:11:00 UTC

The asset that gets breached is usually the one nobody knew was still running. Orphaned instances don't get patched because they're not on anyone's list. An inventory turns ghosts back into resources.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-10 13:26:00 UTC

"We store the cloud key as a masked CI secret, so it's safe." Masking hides it in logs, not from a malicious build step or a poisoned dependency. OIDC means there's no standing key to grab at all.
#cybersecurity #infosec #nostr #devsecops #appsec

2026-07-10 01:05:00 UTC

XXE feels like a dusty old bug, yet XML hides inside SVGs, office docs, and SOAP everywhere. If you parse any of those, the default-on entity resolution still bites.
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-09 18:13:04 UTC

Security, SEO and AI in one daily check, one price.
#cybersecurity #infosec #nostr
https://video.nostr.build/d54d147ef4ac635e00eee8a6eb07f1bbfc32d8f9bbb1c031801a3a242ed7182d.mp4

2026-07-09 18:12:00 UTC

A signed link is a temporary pass anyone holding it can use. If you don't set when it stops working, it keeps letting people in forever. Give it a short shelf life.
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-09 15:26:00 UTC

A critical-severity fix just shipped for Google Android. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-0126
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-09 02:18:00 UTC

Reusing one password everywhere is one key for your house, car, office, and safe. Lose it once and you've lost all four at the same time. Different locks need different keys.
#cybersecurity #infosec #nostr #security #compliance

2026-07-09 01:21:00 UTC

Don't disable accounts "eventually after the handover." Cut access on the last day and grant temporary access back if you truly need something. Default-off is safer than default-on-just-in-case.
#cybersecurity #infosec #nostr #security #compliance

2026-07-08 23:04:00 UTC

Password managers fail on rollout, not on tech. People stall on importing old logins and fighting autofill. Smooth those two steps and adoption climbs without a single extra lecture.
#cybersecurity #infosec #nostr #phishing #awareness

2026-07-08 21:56:00 UTC

The page-one results are Google's published answer to what searchers want. If every result is a list and yours is a single product, no amount of polish fixes that mismatch.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-08 21:29:00 UTC

Good starter SCPs: deny disabling CloudTrail, deny leaving your approved region list, and deny relaxing public-access blocks. Apply at the org root. These are limits no single account should be able to undo.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-08 19:00:00 UTC

The mistake almost every team makes: copying a policy from one service to the next because it "worked." Now five services share permissions only one of them needed. Write each policy fresh.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-08 18:02:00 UTC

XSS isn't about bad input alone; it's about unencoded output. The same string is harmless in a database and dangerous in HTML. The fix lives at the render step, where you encode for the context.
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-08 16:57:00 UTC

An old shopping site got breached and one staffer's password leaked. It was the same one he used for work email. The attacker didn't break in; they just logged in.
#cybersecurity #infosec #nostr #security #compliance

2026-07-08 15:49:00 UTC

A report-it path is the fire alarm on the wall. It works because everyone knows where it is and that pulling it brings help, not a lecture about why you pulled it.
#cybersecurity #infosec #nostr #phishing #awareness

2026-07-08 15:28:03 UTC

Not sure which data rules apply to your website?
#cybersecurity #infosec #nostr
https://video.nostr.build/6e548bb8acbae199f40b859841f365fa4fdd6570bbb754cbc299f9fead9d7dae.mp4

2026-07-08 14:22:00 UTC

The error big sites repeat: leaving every filter, sort and pagination combo open to crawling. Pick the URLs worth indexing and tell Google to skip the rest.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-08 02:23:00 UTC

A critical-severity fix just shipped for Wso2 Api Manager. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-2053
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-08 01:07:00 UTC

When someone asks AI "what is [your category term]," whose definition does it repeat? If it isn't yours, you've left the most basic, high-intent question in your space for a competitor to own.
#cybersecurity #infosec #nostr #AI #LLM

2026-07-07 23:57:00 UTC

Can a stranger query your GraphQL endpoint and get your entire schema back? With introspection left on in prod, one request returns every type and field you have.
#cybersecurity #infosec #nostr #appsec #websecurity

2026-07-07 23:02:03 UTC

Good security saves you cleanup, downtime and stress later.
#cybersecurity #infosec #nostr #security #compliance
https://video.nostr.build/40b93fb3d0ae210397f5104c27299b1125797eb0ed5c0e9ab9437a2874fae096.mp4

2026-07-07 21:34:00 UTC

Pruning pass: list pages with no traffic or links in 12 months, then refresh, merge, or 410 each. Redirect anything with backlinks. Recheck the whole site once a year.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-07 20:49:00 UTC

An avatar loader took a path param directly. A traversal string pulled a file it shouldn't. Resolving the path and checking it stayed under /uploads shut it down.
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-07 19:02:00 UTC

A library's CDN account gets popped on a Friday. Sites with SRI hashes on that script just see it fail to load. Sites without quietly ship the attacker's version all weekend.
#cybersecurity #infosec #nostr #appsec #websecurity

2026-07-07 18:16:00 UTC

Manual patching feels responsible and usually isn't. Good intentions slip; automation doesn't. For security updates specifically, hands-off beats the patch schedule you keep missing.
#cybersecurity #infosec #nostr #serversecurity #sysadmin

2026-07-07 16:46:00 UTC

Does your homepage load on four URLs at once, with and without www, with and without a slash? To Google that can look like four pages competing with each other.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-07 14:53:00 UTC

A review of connected apps turns up an analytics tool nobody's used in a year, still granted full read access to the inbox. One click revokes it. The door was open the whole time.
#cybersecurity #infosec #nostr #phishing #awareness

2026-07-07 13:42:03 UTC

Most website trouble starts with one small, overlooked thing.
#cybersecurity #infosec #nostr #privacy #opsec
https://video.nostr.build/564dc57a8760d9b431560e74ff62ba815b0cb695989f19cdadf810a3cedd0401.mp4

2026-07-07 13:36:01 UTC

Picture folders as rooms. ../ means "go up one room." If a user's filename can say that, they can wander into rooms you never meant to open. Check the final room.
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-07 13:07:00 UTC

Building an llms.txt? List your product, docs, pricing, and top guides as markdown links with one-line summaries. Skip the fluff. Point to the page that answers, not the homepage.
#cybersecurity #infosec #nostr #AI #LLM

2026-07-07 02:01:00 UTC

Answer the question being asked, not the one you wish was asked. If people query "how much does X cost," give a number range up top, not a pitch about your value. AI rewards the direct match.
#cybersecurity #infosec #nostr #AI #LLM

2026-07-07 01:14:00 UTC

Why is 'root' the most attacked username on Earth? Because it exists everywhere and owns everything. Disable direct root SSH and that universal target disappears.
#cybersecurity #infosec #nostr #serversecurity #sysadmin

2026-07-07 00:43:03 UTC

A security advisory is a good reminder to check your updates.
#cybersecurity #infosec #nostr #cve #vulnerability
https://video.nostr.build/4c52e0d3c4a97b9ed4d519cb3025ed573f5a334ae770ebf61e3a1770956bc751.mp4

2026-07-07 00:24:00 UTC

Image SEO pass: WebP or AVIF format, dimensions set to prevent layout shift, descriptive alt text, lazy-load below the fold, real filename not IMG_4821.jpg.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-06 22:18:00 UTC

Logged-in is not the same as allowed. If a user changes the account ID in the request, does your code re-check ownership, or just hand the data over?
#cybersecurity #infosec #nostr #appsec #owasp

2026-07-06 21:50:00 UTC

The mistake almost everyone makes: building great CI security gates, then leaving main open to direct pushes. The gates guard the PR path while a wide-open side path runs right past all of them.
#cybersecurity #infosec #nostr #devsecops #appsec

2026-07-06 19:57:00 UTC

Give each person and tool the one thing they need to do their job, nothing spare. When an account gets misused, least privilege decides whether it's an annoyance or a disaster.
#cybersecurity #infosec #nostr #security #compliance

2026-07-06 18:44:00 UTC

A critical-severity fix just shipped for Ibm Websphere Extreme Scale. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-13773
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-06 17:03:00 UTC

If a random USB stick showed up on a desk labeled "payroll," how many people would plug it in to see? Curiosity is the whole attack. The answer should be zero, and that takes telling.
#cybersecurity #infosec #nostr #phishing #awareness

2026-07-06 16:18:00 UTC

A long password isn't the answer to SSH brute force. Even a great one is still guessable in principle and reusable if leaked. Keys remove the guess entirely. Just use keys.
#cybersecurity #infosec #nostr #serversecurity #sysadmin

2026-07-06 15:25:00 UTC

You sign for a package so the courier knows it's really you. Signing an artifact is the build saying "this is mine." Verifying at deploy is the door checking the signature before letting the box inside.
#cybersecurity #infosec #nostr #devsecops #appsec

2026-07-06 13:39:00 UTC

Can a laptop on your guest wifi reach the server running your business? If you're not sure, treat that as a yes until you've checked. Flat networks connect everything to everything.
#cybersecurity #infosec #nostr #security #compliance

2026-07-06 13:05:00 UTC

Treat an urgent voice call from "the boss" like any other unverified request. A cloned voice can sound exactly right. Confirm big asks through a channel you already trust, not the call itself.
#cybersecurity #infosec #nostr #phishing #awareness

2026-07-06 02:52:00 UTC

Your app borrows code from other people's packages. Sometimes one of those gets a fix. An audit is just asking, "any of my borrowed parts need the new version?" Then you update them.
#cybersecurity #infosec #nostr #appsec #websecurity

2026-07-06 00:49:00 UTC

"Just disable SELinux, it breaks things." It breaks things because it caught something. The fix is usually one policy tweak, not turning it off.
#cybersecurity #infosec #nostr #serversecurity #sysadmin

2026-07-05 22:35:00 UTC

A critical-severity fix just shipped for Litellm. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-49468
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-05 21:01:00 UTC

Build your asset list from four places: your DNS records, your cloud console, your password manager, and the SaaS invoices in accounting. Cross those and you'll find logins you forgot existed.
#cybersecurity #infosec #nostr #security #compliance

2026-07-05 18:11:00 UTC

An access key is a password your code uses. Like any password, the longer it lives, the more places it can slip out. Rotation just means swapping it for a fresh one on a regular beat.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-05 16:36:03 UTC

A quick website health check looks at updates, logins and settings.
#cybersecurity #infosec #nostr #pentesting #networksecurity
https://video.nostr.build/47ae6260b71938bb837c9a8e4202204a89d5041a270479b28724be4fe60d70fe.mp4

2026-07-05 15:59:00 UTC

Open faceted nav is a copier stuck on. One category page becomes a thousand slightly different copies, and Google has to sort the originals from the noise.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-05 15:32:00 UTC

Database hygiene: bind to localhost or private subnet, block the DB port at the firewall, require auth, never tunnel it raw to the public internet. App talks to DB privately.
#cybersecurity #infosec #nostr #pentesting #networksecurity

2026-07-05 13:46:00 UTC

Log connections to your exposed ports and actually watch them. A sudden spike of attempts on a service is your early warning. You can't respond to what you never recorded.
#cybersecurity #infosec #nostr #pentesting #networksecurity

2026-07-05 02:08:00 UTC

You don't need enterprise gear to start. Even your basic router's guest network is a free first split. Perfect segmentation can wait; getting visitors off your main network shouldn't.
#cybersecurity #infosec #nostr #security #compliance

2026-07-05 00:37:00 UTC

Put internal tools behind a VPN, not a public port. Dashboards, staging sites, databases, admin consoles. If only staff should reach it, only the VPN should expose it.
#cybersecurity #infosec #nostr #pentesting #networksecurity

2026-07-04 22:55:02 UTC

Share Vulny and earn a referral commission.
#cybersecurity #infosec #nostr
https://video.nostr.build/aeb5a3013e293b095b22adf828eb626e438126f5b88b5107ef498f6c91d38f21.mp4

2026-07-04 22:40:00 UTC

An employee's password showed up in a leaked list and someone tried it at 3am. The login prompt asked for a code on her phone. No code, no entry. She slept through the whole thing.
#cybersecurity #infosec #nostr #security #compliance

2026-07-04 20:28:00 UTC

Turn on authentication for Redis, Memcached, and Elasticsearch. Several ship with no password by default. An exposed instance with auth off lets anyone who reaches the port read and wipe it.
#cybersecurity #infosec #nostr #pentesting #networksecurity

2026-07-04 19:24:00 UTC

Two pages targeting the same phrase don't double your odds. They split your authority, and Google often ranks the weaker one, leaving your best page on page two.
#cybersecurity #infosec #nostr #seo #marketing

2026-07-04 17:02:03 UTC

Here's a quick site checklist.
#cybersecurity #infosec #nostr
https://video.nostr.build/997b71433c36db8a9ee07a39847d9e94f5f33e1a9f351585856f71913efd8a49.mp4

2026-07-04 16:00:00 UTC

Tags are sticky labels on your cloud stuff: who made it, what it's for, how sensitive it is. With labels, you can find and protect things. Without them, every resource is an anonymous mystery box.
#cybersecurity #infosec #nostr #cloudsecurity #devsecops

2026-07-04 15:37:00 UTC

Before you blanket-block bots, decide which AI crawlers you want citing you. If you disallow GPTBot and ClaudeBot in robots.txt, don't be surprised when those engines never mention your brand.
#cybersecurity #infosec #nostr #AI #LLM

2026-07-04 13:37:00 UTC

A critical-severity fix just shipped for Vowpalwabbit Vowpal Wabbit. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-44723
#cybersecurity #infosec #nostr #cve #vulnerability

2026-07-04 02:31:00 UTC

If someone clones your repo right now, how many live credentials do they get for free? Run a secret scanner across the full history. The count is rarely zero, and every hit needs a rotation.
#cybersecurity #infosec #nostr #devsecops #appsec

2026-07-04 01:11:00 UTC

"Cookies are encrypted over HTTPS, so they're safe." HTTPS protects them in transit, not from a script on your own page. HttpOnly is what keeps client-side JavaScript from reading the session token.
#cybersecurity #infosec #nostr #appsec #owasp