Introduction to Vulnerability Bounty Platform: How HackerOne Can Make Extra Money
Vulnerability Bounty Program Science Popularization: What is Vulnerability Bounty? How to play HackerOne? How to earn extra money with a white hat?
Hot NewsDifferential Segment and Network Isolation: Restricting Attackers' Lateral Movement
Differential Segment Security: What is a differential segment? How to restrict attackers from moving laterally from one invaded machine to other machines?
Hot NewsSupply Chain Attack Protection: Security Defense from npm to CI/CD
Supply Chain Security: What are Supply Chain Attacks? How to protect your project from third-party libraries to CI/CD pipelines?
Hot NewsLLM Tip Injection Protection: A New Attack Surface for Large Language Model Applications
LLM Security: What is Prompt Injection Attack? How to prevent large language models from being manipulated by malicious users?
Hot NewsWAF vs RASP: A Comparison of Two Application Protection Technologies
What is the difference between WAF and RASP? Which is better, web application firewall or runtime application self-protection?
Hot NewsLinux Server Security Baseline: Strengthening from System Initialization
Linux Security Baseline: How to configure a newly installed server for security? A complete checklist from SSH to firewall.
Hot NewsZero trust network architecture: never trust, always verify
Zero Trust Security: What is a Zero Trust Architecture? Why is traditional border security insufficient?
Hot NewsBest Practices for Password Hashing: Comparison of bcrypt, Argon2, and PBKDF2
Password storage security: Do not use MD5 or SHA1! How to choose modern password hashing algorithms? Which is better, bcrypt, Argon2, or PBKDF2?
Hot NewsCryptocurrency Wallet Security: The Difference between Cold Wallet and Hot Wallet
Cryptocurrency Security: What is a Cold Wallet? What is a hot wallet? How to protect your digital assets?
Hot NewsEnd to end encryption principle: why WhatsApp and Signal are more secure
E2EE end-to-end encryption: What is end-to-end encryption? Why can't even the service provider see your message?