TechSplicer Blog

Latest Headlines

{"title":"All","title_box_all":"All","number":3,"multi_cats":{"career-hub":1,"cybersecurity-guides":1,"insights":1,"news":1},"hover_post_icon":"hide","layout":"featured_grid_7","ratio_featured":"hw-ratio40","post_type":"post","post_title":true,"featured_grid_layout":"featured_grid_7","ratio":"hw-ratio40","action":"hexwp_post_featured_grid","post_status":"publish","cats":"career-hub, cybersecurity-guides, insights, news"}

Web Security 101: Understanding Cross-Origin Resource Sharing (CORS)

Critical Authentication Bypass Found in Really Simple Security: 4M WordPress Sites at Risk

Cyber Resilience Act: Security Requirements in Development

CyberWatch Incidents

{"title":"All","title_box_all":"All","number":2,"multi_cats":{"incidents":1},"ignore_sticky_posts":"yes","hover_post_icon":"hide","layout":"grid","column":"2","responsive_column":"tab_2_mob_2","ratio":"hw-ratio50","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":"incidents"}

Critical Authentication Bypass Found in Really Simple Security: 4M WordPress Sites at Risk

PostgreSQL PL/Perl Vulnerability: ENV Variable Exploit & Dev Notes

CyberWatch Alerts

{"title":"All","title_box_all":"All","number":2,"multi_cats":{"alerts":1},"ignore_sticky_posts":"yes","hover_post_icon":"hide","layout":"grid","column":"2","responsive_column":"tab_2_mob_2","ratio":"hw-ratio50","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":"alerts"}

Critical Security Flaw in Mozilla Firefox: A Zero-Day Vulnerability

Meta faces consequences for storing millions of passwords in plaintext

Web Application Security Guides

{"title":"All","title_box_all":"All","number":2,"multi_cats":{"web-application-security":1},"ignore_sticky_posts":"yes","hover_post_icon":"hide","layout":"grid","column":"2","responsive_column":"tab_2_mob_2","between":"15px","ratio":"hw-ratio50","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":"web-application-security"}

Web Security 101: Understanding Cross-Origin Resource Sharing (CORS)

Web Security 101: Understanding Strict-Transport-Security Headers

Career Hub

{"title":"All","title_box_all":"All","number":2,"multi_cats":{"career-hub":1},"ignore_sticky_posts":"yes","hover_post_icon":"hide","layout":"grid","column":"2","responsive_column":"tab_2_mob_2","ratio":"hw-ratio50","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":"career-hub"}

Cyber Resilience Act: Security Requirements in Development

OWASP Top 10: A Sign of Progress in Web Security

Articles Spotlight: Opinions & Editorials

{"title":"All","title_box_all":"All","number":"5","multi_cats":{"":1,"insights":1},"hover_post_icon":"hide","arrows":"yes","auto":"yes","speed":"2000","pause":"10000","layout":"grid","column":"3","ratio":"hw-ratio100","title_color":"#FFFFFF","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":", insights"}

The Future in Software Development Lifecycle Looks Filled with AI

Beyond The Next Telegram: What Security Headlines Miss Entirely

From Cloud to Home: Is Self-Hosting Right for You?

The Human Internet Is Dying, And All We Can Do Is Watch

Cybercrime in 2024: A Global Wake-Up Call – Are You Prepared?

{"speed":"2000","pause":"10000","between":"0","pager":true,"timer":false,"controls":true,"auto":true,"item":3,"slideMove":1,"loop":false,"slideMargin":0}

Digital Welbeing & Security Patches

{"title":"All","title_box_all":"All","number":2,"multi_cats":{"digital-wellbeing":1,"security-patches":1},"ignore_sticky_posts":"yes","hover_post_icon":"hide","layout":"grid","column":"2","responsive_column":"tab_2_mob_2","between":"15px","ratio":"hw-ratio50","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":"digital-wellbeing, security-patches"}

PostgreSQL PL/Perl Vulnerability: ENV Variable Exploit & Dev Notes

Synology affected by a critical zero-click flaw. Another win for Pwn2Own Ireland 2024

Hardware News

{"title":"All","title_box_all":"All","number":2,"multi_cats":{"hardware-news":1},"ignore_sticky_posts":"yes","hover_post_icon":"hide","layout":"grid","column":"2","responsive_column":"tab_2_mob_2","between":"15px","ratio":"hw-ratio50","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":"hardware-news"}

Quantum Computing Progress: Nudging Absolute Zero

Nvidia has unveiled the Blackwell B200 GPU, proclaimed as the “world’s most powerful chip” designed specifically for artificial intelligence

Fundamental Guides

{"title":"All","title_box_all":"All","number":2,"multi_cats":{"fundamentals":1},"ignore_sticky_posts":"yes","hover_post_icon":"hide","layout":"grid","column":"2","responsive_column":"tab_2_mob_2","between":"15px","ratio":"hw-ratio50","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":"fundamentals"}

Introduction to Offensive Security – The Ethics and Legality of Cybersecurity

Understanding Cyber Threats: Malware

AI & LLM

{"title":"All","title_box_all":"All","number":2,"multi_cats":{"ai":1,"ai-updates":1},"ignore_sticky_posts":"yes","hover_post_icon":"hide","layout":"grid","column":"2","responsive_column":"tab_2_mob_2","between":"15px","ratio":"hw-ratio50","post_type":"post","action":"hexwp_post_grid_main","post_status":"publish","cats":"ai, ai-updates"}

The Future in Software Development Lifecycle Looks Filled with AI

The Human Internet Is Dying, And All We Can Do Is Watch

Latest Posts

{"title":"All","title_box_all":"All","number":10,"excerpt":"yes","hover_post_icon":"hide","more_posts":"pagenavi","layout":"list_1","ratio":"hw-ratio75","image_width":"25","post_type":"post","list_layout":"list_1","action":"hexwp_post_list","post_status":"publish"}

Web Security 101: Understanding Cross-Origin Resource Sharing (CORS)

Continuing the web security headers series, after covering HSTS (Strict Transport Security), and CSP (Content Security Policy), now comes a more painful security header, so to speak. Painful, at least for web developers. And if we don’t want to generalize, CORS represented a painful header, or something that I always needed to bypass on the […]

Critical Authentication Bypass Found in Really Simple Security: 4M WordPress Sites at Risk

Wordfence’s Threat Intelligence team has identified a critical authentication bypass vulnerability affecting over 4 million WordPress sites that are actively using Really Simple Security (formerly Really Simple SSL). Remote attackers can exploit this security flaw to gain administrator access, even with two-factor authentication enabled. Vulnerability Profile CVE ID: CVE-2024-10924 CVSS Score: 9.8 (Critical) Affected Versions: […]

Cyber Resilience Act: Security Requirements in Development

On October 10th, 2024, the EU Parliament mandated security standards for connected software with the enactment of the Cyber Resilience Act (CRA). The act mandates that full compliance needs to be achieved within 36 months. However, according to Article 14, vulnerability reporting obligations must be met within 21 months of enactment. Why is Cyber Resillience […]

PostgreSQL PL/Perl Vulnerability: ENV Variable Exploit & Dev Notes

Researchers have discovered a high-severity vulnerability in PostgreSQL’s PL/Perl trusted language extension that could allow attackers to execute arbitrary code. The flaw, tracked as CVE-2024-10979, received a CVSS score of 8.8. CVE-2024-10979 Vulnerability Type: Environment variable manipulation in PostgreSQL PL/Perl. Impact: Arbitrary code execution capability. Affected Versions: All versions before: PostgreSQL 17.1 PostgreSQL 16.5 PostgreSQL […]

Web Security 101: Understanding Strict-Transport-Security Headers

In this series of evaluating web security headers, we are now diving in with HSTS, the HTTP Strict-Transport-Security response header. I will usually explain this in a way my nephew always asks fundamental questions: starting with few why’s until we get to how the universe was created and then some. But in this article, we […]

Introduction to Offensive Security – The Ethics and Legality of Cybersecurity

Offensive security practices like penetration testing and red teaming are used to identify and address vulnerabilities before malicious actors exploit them. Ethical hacking activities, while legal, often receive public scrutiny because they are associated with “hacking.” The term “hacker” is commonly linked to criminal activities, thanks to media portrayal. We will follow the convention of […]

Web Security 101: Understanding Content Security Policy Headers (CSP)

Content security policy (CSP) is a browser feature that can help minimize the risk of a multitude of security threats. To be noted that it’s one of the most exhaustive header that lets you control a various sources and parameters. In web development, it may cause more headaches than not, because usually if it’s being […]

OWASP Top 10: A Sign of Progress in Web Security

As sarcastic as it sounds, even with all the ever-increasing data breaches and various attacks, we are seeing ‘improvement’ let’s say, in the OWASP Top 10. About the top 10 The OWASP (Open Web Application Security Project) top 10 is widely recognized as one of the best guidelines for web developers. In cybersecurity, we have […]

Synology affected by a critical zero-click flaw. Another win for Pwn2Own Ireland 2024

In a weird sense, it feels good to point out security issues on competitors, even though we recommend Synology more than QNAP. After we wrote QNAP fixed two 0-day critical security issues, this time is Synology’s turn to come with security patches. But the truth is million of devices are currently at risk. We still […]

QNAP fixed NAS backup zero-day demonstrated at Pwn2Own Ireland 2024

Two major security issues hit QNAP users In a way of working that looks like someone digging a trench while the other behind is covering it, and a third one is digging it yet again, this is another example of how bad software keeps cyber security in business. (Great read, by the way) Bad software […]

Navigation

Connect

Montly Newsletter

Social