A security researcher discovers goHardDrive exposed thousands of customer records via an insecure RMA status check form with no authentication.
Analyzes a famous 2016 phishing attack to argue that modern security hinges on human error, not just technical defenses.
The article critiques the use of SSNs as both a secret and a universal ID, arguing it's a core problem behind data breaches like Equifax.
Discusses the inevitability of website breaches, lists major hacks, and explains how to assess your risk and prepare for security incidents.
A cautionary analysis of the Code Spaces hack, explaining how similar cloud security breaches can happen on AWS, Azure, or any host, and outlining basic mitigation steps.
