Security Design Principles 101: Defense-in-Depth
In this article, we will discuss my all-time-favorite security topic: Defense-in-Depth. Encountering the secure design principle while studying…
Cybersecurity Guides
15 posts
Cybersecurity 101: Understanding Confidentiality, in the CIA Triad
Continuing with our cybersecurity fundamental series, we’ll explore one essential concept in cybersecurity – the CIA Triad. While…
The Mathematics Behind Password Strength: The Simple Truth
The conventional thinking about password security often misses important nuances. While common sense trained us to believe “p#4St49@!”…
Cybersecurity 101: Understanding Reconnaissance – The First Step in MITRE ATT&CK
Continuing our mitre series, we will explore how attackers take the first step. As we will later uncover,…
Application Security 101: Understanding DevSecOps – A Developer’s Guide
What is DevOps security? Known easily as DevSecOps, the definition is pretty much straightforward: integrating security practices into…
Cybersecurity 101: OWASP Top 10 for LLM Applications, updated for 2025
In an expected turn of events, OWASP has released the Top 10 for Large Language Models, updated for…
Cybersecurity 101: Understanding MITRE ATT&CK Framework
Traditional security frameworks often fail to connect with the realities of development. Usually, we see the results of…
Web Security 101: Understanding Cross-Origin Resource Sharing (CORS)
Continuing the web security headers series, after covering HSTS (Strict Transport Security), and CSP (Content Security Policy), now…
Web Security 101: Understanding Strict-Transport-Security Headers
In this series of evaluating web security headers, we are now diving in with HSTS, the HTTP Strict-Transport-Security…
Introduction to Offensive Security – The Ethics and Legality of Cybersecurity
Offensive security practices like penetration testing and red teaming are used to identify and address vulnerabilities before malicious…