AI Automated Pentesting: The Good, The Bad, The Ugly

As with any recent domain, I’ve heard the term “AI pentesting” more often than one would want to. From my perspective, it feels tiring to hear that artificial intelligence touches every conceivable…

alexmacra.com

Do LLMs exhibit ideological biases? An experiment across today’s top models

As more and more of us use Large Language Models (LLMs) for daily tasks, their potential biases become increasingly important. We investigated whether today's leading models, such as those from OpenAI...

anomify.ai

Signal calls on Germany to vote against ‘Chat Control,’ saying it would leave EU market

The head of the Signal Foundation raised concerns around Germany now refusing to say whether it will support Chat Control in an upcoming vote.

therecord.media

CI/CD Security in Automotive Software: More Questions than Answers

There are many challenges in automotive software development. Not only with the need to deliver fast, while making sure that the software actually works as intended inside the car. Once it’s deployed…

alexmacra.com

Pentesting a Web Application: A Case Study

Following my previous case study on Windows application security testing, I returned to my area of expertise: web applications. Familiarity doesn’t guarantee ease, particularly when facing deadlines…

alexmacra.com

Web App Security Architecture: Implementing Defense-in-Depth

In this article, we are going to explore the defense-in-depth principle applied to web applications. Actually, it can apply to most software. Nowadays, modern software is designed with an internet…

alexmacra.com

LLMs are on their way to becoming our greatest security vulnerability

LLMs are currently transforming all fields and are being weaponized by cyber attackers. In a brief span of time, GenAI has left its mark on cybersecurity as well. While gaining traction…

alexmacra.com

WhatsApp gets the boot: House of Representatives the app from official devices

The US Office of Cybersecurity finally banned WhatsApp on all staff devices, a move that has left many wondering why it took so long. The memo: Meta also confirmed this announcement…

alexmacra.com

Signal is in the news and for the wrong reasons, yet again

“The human is the weakest link in the security chain.” Recent events in Washington have demonstrated this cliche with clarity. This week, we’ve all witnessed yet another high-profile security breach…

techsplicer.com

Pentesting a Windows Application: A Case Study

With time, pentesting develops into a somewhat predictable process. Years spent coding web applications now frequently result in web penetration testing assignments for me.

techsplicer.com

Cybersecurity 101: Understanding Confidentiality, in the CIA Triad

Continuing with our cybersecurity fundamental series, we’ll explore one essential concept in cybersecurity – the CIA Triad. While the acronym might evoke thoughts of a certain intelligence agency…

techsplicer.com

DORA 2025: The Financial Sector’s New Cyber Reality

The Digital Operational Resilience Act (DORA) will apply as of 17 January 2025, marking another checkpoint in EU’s regulatory landscape. While organizations still struggle to adapt to NIS2…

techsplicer.com

Always On Guard: The Mental Health Cost of Cyber Threat Awareness

Two years ago, I joined the cybersecurity field. I began on my own, but then pursued it as a career change, coming from development and tech lead role. What I completely did not foresee was how this…

techsplicer.com

webscan.dev | Comprehensive Web Security Scanner

Free instant security analysis for your website. Check headers, evaluate security posture, and get actionable recommendations.

webscan.dev

The Psychology of Phishing: Why Smart People Fall for Scams

Do you know that feeling of dread when you realize you’ve clicked on a suspicious link? I know it perfectly. It has happened to me several times in the last year! The positive aspect of it is that it…

techsplicer.com

Self-Designing Software – Communications of the ACM

cacm.acm.org

Where Humans Still Have the Edge on AI

Gen AI has several attributes that humans lack. It’s always on. It boasts encyclopedic knowledge. It generates output instantly. It can scale endlessly. This new era of AI can feel intimidating for th...

hbr.org

Which AI Companies Are the Safest—and Least Safe?

A new report graded companies including Meta, Anthropic, and OpenAI on their AI safety measures. Many were found lacking.

time.com

Security ProbLLMs in xAI's Grok: A Deep Dive · Embrace The Red

Large language model applications suffer from a few core novel issues that have been identified over the last two years. Let's see how Grok fares on those.

embracethered.com

AI and the coming inequality · @jimmyislive

jimmyislive.dev

It's Surprisingly Easy to Jailbreak LLM-Driven Robots

Researchers induced bots to ignore their safeguards without exception

spectrum.ieee.org

Offensive Security Certified Professional (OSCP): Understanding the Technical Challenge

The Offensive Security Certified Professional (OSCP) certification stands as one of the most demanding technical assessments in cybersecurity, as of today. Unlike other certifications that test…

techsplicer.com

Meta’s Infrastructure of Influence: Technical Analysis of Romania’s 2024 Election Campaign

Detailed technical investigation reveals sophisticated infrastructure behind Meta’s coordinated influence operation during Romania’s 2024 presidential election, highlighting cybersecurity implications...

techsplicer.com

Romania’s Electrica Group Responds to Cybersecurity Incident

Electrica Group, serving 4M+ Romanian customers, reports cybersecurity incident. Latest in series of attacks targeting critical infrastructure in Eastern Europe.

techsplicer.com

Cybersecurity 101: Understanding Reconnaissance - The First Step in MITRE ATT&CK

Continuing our mitre series, we will explore how attackers take the first step. As we will later uncover, the same principle applies if we discuss a specific target that threat actors want to attack…

techsplicer.com

EU Orders TikTok Data Preservation in Romanian Election Interference

The European Commission issued a retention order to TikTok on December 6, 2024, mandating the need to keep all data related to the Romanian elections for further investigations. This order comes a few...

techsplicer.com