Articles

In-depth security research and analysis.

No articles match your search.

• 
  October 29, 2026 AI Security 14 min read RAG Security: How Retrieval-Augmented Generation Can Leak Your Private Data

  RAG pipelines leak data in four ways: over-permissioned retrieval, indirect prompt injection, poisoned documents, and sensitive data in the index. How each works and how to fix it.

• 
  October 21, 2026 Cloud Security 3 min read How to Find Publicly Accessible S3 Buckets in Your AWS Account

  Find publicly accessible S3 buckets with the AWS CLI. Check policy status, ACLs, and Block Public Access in one loop, then lock the account down safely.

• 
  October 18, 2026 Security Engineering 3 min read How to Check Which Users Have Sudo Access on a Linux Host

  Find every user with sudo access on a Linux host: check sudo groups, read sudoers and sudoers.d, list effective privileges per user, and flag the risky rules.

• 
  October 10, 2026 Security Engineering 3 min read How to Find World-Writable Files in Linux

  Find world-writable files and directories in Linux with find, work out which ones are a privilege-escalation risk, and fix them without breaking anything.

• 
  October 1, 2026 DevSecOps 4 min read Did That Secret Ever Touch Your Git History?

  How to search your git history for committed secrets — and what to do when you find one.

• 
  September 28, 2026 Security Engineering 2 min read How to Decode and Inspect a JWT Token (Without Sending It Anywhere)

  Decode and read JWT token claims locally from the command line — no jwt.io, no third-party sites, no copy-pasting production tokens into a browser tab.

• 
  September 25, 2026 AI Security Featured 23 min read How to Secure an MCP Server: Security Checklist for AI Builders

  A practical security guide covering MCP server authentication, authorization, tool input validation, prompt injection, tool poisoning, secrets management, infrastructure hardening, and a complete checklist.