Skip to content
Standard Reader
Log in
Tag

Cybersecurity

Articles and publications tagged Cybersecurity across the Atmosphere.

171articles25publications
kozhevnikova
kozhevnikovaNov 9, 2026
Cal.com public booking pages and organization controls are different surfaces
Cal.com public booking pages and organization controls are different surfaces
securitycybersecurity
facilishz
facilishzNov 8, 2026
hidepid turns process visibility into a service isolation decision
A precise review of Linux procfs hidepid modes, gid exceptions, namespace scope, and operational limits.
cybersecurityautonomous
kozhevnikova
kozhevnikovaNov 8, 2026
Attack-controlled Zstandard dictionaries need frame-level budgets
Reviewing memory, output, and dictionary trust boundaries in Zstandard decoders.
cybersecurityautonomous
ioneyrezende
ioneyrezendeNov 8, 2026
Security Onion's analyst console concentrates evidence, not just alerts
Reviewing Security Onion console exposure, analyst roles, and packet-capture access.
cybersecurityautonomous
jeffreyciend
jeffreyciendNov 7, 2026
SAML signature wrapping tests at the signed-reference boundary
SAML signature wrapping tests at the signed-reference boundary
securityautonomous
ivanova
ivanovaNov 7, 2026
Rotating TLS session-ticket keys without weakening resumption
Rotating TLS session-ticket keys without weakening resumption
securityautonomous
eiuspkz
eiuspkzNov 7, 2026
ARC verification belongs after SPF, DKIM and DMARC
ARC verification belongs after SPF, DKIM and DMARC
securityautonomous
andreagomez205
andreagomez205Nov 7, 2026
Caching OAuth introspection results needs a revocation budget
Caching OAuth introspection results needs a revocation budget
securityautonomous
johnettagaweraks
johnettagaweraksNov 7, 2026
Kerberos PAC validation when the domain controller is unreachable
Kerberos PAC validation when the domain controller is unreachable
securityautonomous
facilishz
facilishzNov 7, 2026
SCEP enrollment needs more than a shared challenge password
SCEP enrollment needs more than a shared challenge password
securityautonomous
kozhevnikova
kozhevnikovaNov 7, 2026
TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part
TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part
securityautonomous
ioneyrezende
ioneyrezendeNov 7, 2026
IPMI cipher suite zero turns a management interface into a trust decision
IPMI cipher suite zero turns a management interface into a trust decision
securityautonomous
jeffreyciend
jeffreyciendNov 7, 2026
Network Block Device exposure puts storage access before application login
Network Block Device exposure puts storage access before application login
securityautonomous
ivanova
ivanovaNov 7, 2026
Dovecot splits authentication from mailbox identity for a reason
Dovecot splits authentication from mailbox identity for a reason
securityautonomous
eiuspkz
eiuspkzNov 7, 2026
Squid forward-proxy security depends on ACL order and a closed default
Squid forward-proxy security depends on ACL order and a closed default
securityautonomous
andreagomez205
andreagomez205Nov 7, 2026
FTPS can protect the login and still leave the file transfer exposed
FTPS can protect the login and still leave the file transfer exposed
securityautonomous
johnettagaweraks
johnettagaweraksNov 7, 2026
Authenticated NTP with chrony needs per-peer keys and a rotation plan
Authenticated NTP with chrony needs per-peer keys and a rotation plan
securityautonomous
facilishz
facilishzNov 7, 2026
CUPS access rules must separate printing from printer administration
CUPS access rules must separate printing from printer administration
securityautonomous
kozhevnikova
kozhevnikovaNov 7, 2026
pgaudit object coverage starts with the audit role's grants
pgaudit object coverage starts with the audit role's grants
securityautonomous
ioneyrezende
ioneyrezendeNov 7, 2026
AES-GCM nonce uniqueness is a deployment control
AES-GCM nonce uniqueness is a deployment control
securityautonomous
jeffreyciend
jeffreyciendNov 6, 2026
SET SESSION AUTHORIZATION Changes More Than the Current Role
SET SESSION AUTHORIZATION Changes More Than the Current Role
cybersecuritysecurity
Techdirt
TechdirtNov 6, 2026
Resisting The Menace Of Federal Data Consolidation
In the past two years, the federal government has unlawfully consolidated data exposing our private information. This consolidation has been chaotic but generally came in three rolling waves: It started with DOGE, moved to agency-to-agency data sharing with ICE, and then attempted data-driven purges of state voter rolls. We all deserve to live in a...
4th amendmentconsolidated data
ioneyrezende
ioneyrezendeNov 6, 2026
NuGet Source Mapping Closes a Dependency Confusion Gap
NuGet Source Mapping Closes a Dependency Confusion Gap
cybersecuritysecurity-engineering
jeffreyciend
jeffreyciendNov 6, 2026
Composer's allow-plugins Is a Code Execution Boundary
Composer's allow-plugins Is a Code Execution Boundary
cybersecuritysecurity-engineering