2026
-
Cyber decoys for defenders: what CISA's new guidance actually says
In September 2026 CISA published guidance on cyber decoys — lures, tripwires and honeytokens — for detection and response. We walk through the recommendations and show how they translate into practice through deception.
-
OT/SCADA — Global Security Standards and Audit & Testing Requirements
Comparative study of OT/SCADA security standards: audit requirements, penetration testing and vulnerability assessments across Europe, the US, Asia-Pacific and the Middle East.
-
From Serialized Bytes to Shell: Exploiting Java Deserialization in Spring HttpInvoker
Exploiting Java deserialization in Spring HttpInvoker — a penetration testing case study from reconnaissance to remote code execution.
2025
-
Post-Quantum Cryptography: Implications for Banking, Critical Infrastructure, and the European Digital Ecosystem — A Practitioner's Analysis
Post-quantum cryptography: NIST standards, banking and critical infrastructure impact, European regulations, and migration framework.
-
Connecting strongSwan to FortiGate with PSK + XAuth + TOTP (2FA)
Patching strongSwan for FortiGate XAuth two-step TOTP authentication — from diagnosis to working solution, with split-tunnel security findings.