Security
sudo's latest "trick": when chroot and nsswitch conspire against you (cve-2025-32462)
Ah, sudo. The trusty command that grants mere mortals the power of a deity (root, that is) on a Linux
Jul 4, 2025
About 6 minutes read
Security
Best practices, tools, and paradigms for securing modern cloud infrastructures and application deployments.
Kubernetes
Why I trust Kubernetes: The Built-In Zero-Trust Model with Mutual TLS (mTLS)
Kubernetes is often celebrated for its scalability, reliability, and portability. However, one feature that often goes under the radar is
Feb 5, 2025
About 2 minutes read
Security
Whonix: An Operating System for DevSecOps, Researchers and Paranoids like you and me
Ah, privacy. That mythical beast we all chase in this digital jungle. You think incognito mode is enough? Honey, please.
Oct 4, 2024
About 2 minutes read
Security
How to fix the Critical 9.9 CVE Linux Vulnerability in CUPS: A Step-by-Step Guide
Oh No! Not My Printers! Exploiting CUPS on Linux: A How-to Guide (Just Kidding, Please Patch Your Systems) Remember
Sep 0, 2024
About 3 minutes read
Linux
Linux could be facing a critical RCE vulnerability, scoring 9.9 (CVE): Let's separate hype, security, facts, and developer drama
The Linux community is abuzz with news of a potential Remote Code Execution (RCE) vulnerability, sending chills down the spines
Sep 4, 2024
About 3 minutes read
DevSecOps
Vulnerabilidad crítica en un repo de Stripe: ¿Cómo asegurar los Workflows de GitHub Actions? Entendiendo "Pwn Request"
Una vulnerabilidad grave en el GitHub Actions Workflow de Stripe permitió a un investigador obtener acceso al token de GitHub
Sep 3, 2024
About 6 minutes read
DevSecOps
Security Breach in Stripe GitHub's Repo: How to Secure GitHub Actions Workflows? Understanding the Pwn Request Vulnerability
A severe vulnerability in Stripe’s GitHub Actions Workflow allowed a researcher to gain access to the repository's
Sep 3, 2024
About 6 minutes read
Events and meets
Participa en el COBIT DAY 2024 organizado por ISACA Santiago Chapter y conoce cómo optimizar tus estrategias en TI
¡Prepárate para el COBIT DAY 2024 organizado por ISACA Santiago Chapter! Este evento, que tendrá lugar el 26 de septiembre,
Sep 3, 2024
About 3 minutes read
Web Assembly
New risks of WebAssembly (WASM): A Hidden Door for Malware?
Secure Web Gateways (SWGs) are increasingly vulnerable to 'Last Mile Reassembly Attacks' that leverage WebAssembly (WASM) to deliver
Aug 5, 2024
About 4 minutes read
Quantum Computing
Quantum Internet is Real and it's an Underground Network in NYC, USA
Qunnect Inc., a Brooklyn-based company, has successfully operated a prototype quantum internet network under the streets of New York
Aug 0, 2024
About 4 minutes read
DevSecOps
OpenCTI: The Open-Source Cyber Threat Intelligence Platform
TL/DR OpenCTI is an open-source platform designed to help organizations manage their cyber threat intelligence (CTI) data and
Aug 4, 2024
About 4 minutes read
Kubernetes
Kubernetes v1.31.0 ya está aquí: ¿Qué hay de nuevo y por qué debería importarme?
Kubernetes v1.31 es más que solo una colección de nuevas características y mejoras; es un testimonio del compromiso del
Aug 3, 2024
About 9 minutes read