PHP2Shell: discovery, disclosure and the race to patch
Two critical PHP flaws, a disrupted embargo and attacks before disclosure. The timeline, AWS and Cloudflare observations, and what the patches actually fix.
Read article
More articles
Start with practical topics, then apply the lessons to your own environment.
Lessons to Be Learned from the OpenAI-Hugging Face Incident
The incident proved that AI-orchestrated attacks can operate at machine speed. Defense must respond with agentic red teaming, automated remediation, and AI-assisted incident response.
Read article
The Rise of AI Pentesting: What It Means for CISOs and the People Who Hack for a Living
Automated penetration testing has grown up. What does AI pentesting mean for CISOs, pentesters, and the future of offensive security?
Read article
Cyber Threat Radar review: threat intelligence for the Netherlands and Belgium
Most threat intelligence platforms are expensive, generic, or both. Digiweerbaar's Cyber Dreigingsradar takes a different approach with local threat monitoring, ransomware tracking, and actionable intelligence for Dutch and Belgian organizations.
Read article
Vibe coded and vulnerable
The security time bomb being deployed across the Dutch IT landscape, one Lovable project at a time
Read article
Password lists for security testing: beyond RockYou.txt
Still relying on RockYou? You're leaving coverage on the table. Learn how effective password lists are built, refined, and tailored for real-world security testing.
Read article