Quarterly update for Q1 2026, covering the previous 3 months and including stats and commentary on our progress as we build EthicalAds

So you’ve read Simon Willison’s post about the lethal trifecta and how, like the infinity stones on Thanos’ gauntlet, you really don’t want them all to be present at once.

If you are a user of LLM systems that use tools (you can call them “AI agents” if you like) it is critically important that you understand the risk of …

Industrial management platform for Firehound-Go scans.

Learn how to Sandbox Linux apps with Firejail and Bubblewrap. Isolate apps easily for stronger security, privacy, and system protection.

Bubblewrap is a command-line sandboxing tool for creating unprivileged containers and securely running Linux applications. It’s uses user_namespaces feature for creating unprivileged containers.

Learn to sandbox Linux apps with Firejail Bubblewrap. Secure your system by isolating potentially risky applications. Stay safe online

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

Learn how Russian hackers exploit vulnerabilities in cloud environments, challenging traditional security assumptions.

Decentralized Identifiers (DIDs) are transforming digital identity by giving users full control, better privacy, and secure authentication without central authorities.

How we discovered that bits aren't wax, trust doesn't scale, and humans will always route around friction like water around stone.

The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it's time for a broader awareness of the threat. The…

Direct navigation -- the act of visiting a website by manually typing a domain name in a web browser -- has never been riskier: A new study finds the vast majority of "parked" domains -- mostly expired or dormant domain…

The Amazon threat intelligence team has confirmed a prolonged Russian hack attack targeting AWS customers. Here’s what you need to know.

Doppler's secrets management platform helps teams secure, sync, and automate their secrets across environments and infrastructure. Experience enhanced security, agility, and automation with our cloud platform.

Firstyear's blog

Manage cookie consent across your web properties by uncovering hidden trackers, maximizing opt-ins, and ensuring you meet data privacy regulatory standards.

Hugely disruptive ransomware attacks can be thwarted by distributed lateral security embedded at the private cloud level, using macro- and micro segmentation and integrated threat detection and prevention.

Ethical hacker Betta Lyon Delsordo is challenging outdated stereotypes, mentoring the next generation of girls in tech, and showing that cybersecurity can be smart, collaborative – and seriously fun

The Amazon threat intelligence team has confirmed a prolonged Russian hack attack targeting AWS customers. Here’s what you need to know.

Learn how advanced prompt injection attacks breach multi-agent AI workflows – and how hardened system prompts and security patterns stop them.

They're not who you think they are.

A barely perceptible keystroke delay was the smoking gun that led to the uncovering of a malign imposter.

An intermittent outage at Cloudflare on Tuesday briefly knocked many of the Internet's top destinations offline. Some affected Cloudflare customers were able to pivot away from the platform temporarily so that visitors could still access their websites. But security experts…

I've detected 16 CAs issuing certificates which rely on CT logs that are not recognized by all browsers

In this article I cover what is considered to be the safest programming language developed.