The Italian blog on cybersecurity
Articles, guides and tutorials on cybersecurity, ethical hacking, penetration testing and web app security.
IWSS, F-Hack's research across 10,022 .it domains: no security header exceeds 42% adoption, fewer than 1% of CSPs are actually restrictive, only 2.4% ...
CSRF remains in the OWASP Top 10 and hits applications that look secure. How it really works, with exploit examples and concrete countermeasures to im...
Anthropic reports a massive illicit distillation campaign by DeepSeek, Moonshot AI and MiniMax. Over 13 million interactions to extract Claude's reaso...
Decrypting isn't magic: you need the right key, the correct IV or nonce, and to know which mode was used to encrypt. Here's how it works with AES and ...
What a backdoor is, how it differs from viruses and trojans, how it gets installed on a system, and the signs that help you spot one in time.
AES encrypts fast with a shared key. RSA solves the distribution problem with two keys. SHA-256 doesn't decrypt anything. Three different tools for th...
A specially crafted animated sticker file can execute remote code on Telegram for Android and Linux with no user interaction at all. ZDI-CAN-30207, CV...
Meta has announced the permanent removal of end-to-end encryption from Instagram DMs, with shutdown planned after May 8, 2026. A decision that reopens...
A bot requesting dozens of password resets per minute on a WordPress site, with a different user-agent on every request. Here's how to spot it in ngin...
Using **Nmap on Linux** to analyze networks and improve information security. In this guide you'll learn how to install Nmap, run basic and advanced s...
Protect your Linux server from brute force attacks with Fail2ban. This guide explains how to install and configure this powerful IPS tool to scan logs...
Follow us on social media so you don't miss the latest articles, news and cybersecurity tutorials.