BestHub
Sign in

Information Security

Showing 100 articles max
Latest Popular
TechVision Expert Circle
TechVision Expert Circle
Sep 3, 2026 · Information Security

AI-Driven Attacks Are Here: The Four-Layer Firewall CTOs Must Build Now

This article analyzes how AI-powered attacks have transformed the threat landscape with automated vulnerability discovery, personalized phishing, and code mutation, why traditional defenses fail against speed, scale, and mutation asymmetry, and presents a four-layer AI security governance architecture with a practical checklist for CTOs to implement immediate protections.

AI agentsAI governanceAI red teaming
0 likes · 15 min read
AI-Driven Attacks Are Here: The Four-Layer Firewall CTOs Must Build Now
Frontline Investigation
Frontline Investigation
Sep 2, 2026 · Information Security

Why Fixed Vulnerabilities Keep Reappearing: The Hidden Drift in Attack Surface Management

This article explains why asset exposure surfaces reappear after vulnerability patching, distinguishing static patch management from dynamic attack surface relationships, identifying three drift types (asset, connection, responsibility), and proposing three confirmations (object, path, change) to ensure risks truly exit rather than just being patched.

CISA KEVNIST CSFasset drift
0 likes · 10 min read
Why Fixed Vulnerabilities Keep Reappearing: The Hidden Drift in Attack Surface Management
Golang Shines
Golang Shines
Sep 2, 2026 · Information Security

How CyberStrikeAI Orchestrates 100+ Security Tools for Automated Red‑Team Testing

CyberStrikeAI is an AI‑native security testing platform built in Go that integrates over 100 security tools through a multi‑agent orchestration engine, offering role‑driven testing, dynamic task planning, knowledge‑base vector search, MCP protocol integration, and a full vulnerability‑lifecycle workflow for automated red‑team operations.

AI securityEinoGo
0 likes · 18 min read
How CyberStrikeAI Orchestrates 100+ Security Tools for Automated Red‑Team Testing
Architects Research Society
Architects Research Society
Sep 2, 2026 · Information Security

Why Agent Authorization Differs from User Permissions – The AEGIVELA Security Model

The article explains how traditional IAM falls short for agents and introduces AEGIVELA’s seven‑step security model—distinguishing human, agent, and workload identities, separating policy decisions from execution, using scoped approvals, limited delegation, short‑lived execution grants, revocation as a first‑class capability, and evidence generation.

AEGIVELAAuthorization modelEvidence generation
0 likes · 5 min read
Why Agent Authorization Differs from User Permissions – The AEGIVELA Security Model
AI Architecture Path
AI Architecture Path
Sep 2, 2026 · Information Security

Casdoor: Open‑Source IAM/SSO for the AI‑Agent Era – 14.3K+ Stars, One‑Stop Auth

The article analyzes the security debt caused by fragmented authentication across backend, portal, mobile and AI‑Agent services, introduces Casdoor – an open‑source, self‑hosted IAM/SSO platform that unifies identity, supports multiple protocols, AI‑native MCP/A2A auth, and provides detailed deployment, integration and comparison guidance.

AI AgentCasdoorIAM
0 likes · 15 min read
Casdoor: Open‑Source IAM/SSO for the AI‑Agent Era – 14.3K+ Stars, One‑Stop Auth
macrozheng
macrozheng
Sep 1, 2026 · Information Security

Why Sa-Token Is Winning Over Developers: A Java Authentication Efficiency Revolution

Sa-Token has rapidly become the go‑to Java permission framework because it abstracts and automates common security concerns, offers a lightweight Core‑Plugin‑Adapter architecture, supports plug‑in storage like Redis, and lets developers implement login, logout and permission checks with a single line of code, dramatically reducing development time compared with Spring Security.

JavaPermission FrameworkSa-Token
0 likes · 16 min read
Why Sa-Token Is Winning Over Developers: A Java Authentication Efficiency Revolution
Frontline Investigation
Frontline Investigation
Aug 31, 2026 · Information Security

Why Closed Security Alerts Don't Mean Risk Is Converged

This article explains why marking security alerts as closed often conflates process completion with actual risk convergence, detailing a framework for evidence-based alert triage that distinguishes signal explanation, risk exclusion, state verification, and reusable judgment, referencing NIST and CISA guidelines.

CISANIST SP 800-61Security Operations
0 likes · 10 min read
Why Closed Security Alerts Don't Mean Risk Is Converged
Top Architecture Tech Stack
Top Architecture Tech Stack
Aug 31, 2026 · Information Security

Massive Claude Account Hijacking – Why Session Cookies Are the Real Threat

A wave of forced logouts on Claude revealed that attackers steal browser session cookies and payment data, turning AI credit limits into a lucrative commodity, and the article walks through the malware families involved, the limitations of password changes, and a detailed remediation checklist for developers.

AI account securityAPI keyBest Practices
0 likes · 15 min read
Massive Claude Account Hijacking – Why Session Cookies Are the Real Threat
Java Tech Enthusiast
Java Tech Enthusiast
Aug 28, 2026 · Information Security

Embedding a Whole Website Inside a Favicon: What the Risks Reveal

By encoding a tiny HTML page into an 8×8 pixel favicon, the author demonstrates that a website can be hidden in a seemingly innocuous image, explores the steganographic technique, evaluates its storage limits, and discusses the security implications and practical drawbacks of such a covert channel.

CSPWeb Securitybrowser
0 likes · 14 min read
Embedding a Whole Website Inside a Favicon: What the Risks Reveal
BanTech Think Tank
BanTech Think Tank
Aug 28, 2026 · Information Security

LLM-Enhanced Penetration Testing for Finance: Multi-Agent Architecture & Practice

The article details a large language model-enhanced penetration testing framework for financial services, combining a four-layer architecture, multi-agent collaboration, financial business semantic knowledge base, and reusable skill library to improve testing efficiency, business logic risk detection, and process standardization, validated through deployment at China Postal Savings Bank.

Business Logic VulnerabilitiesChina Postal Savings BankFinancial Security
0 likes · 21 min read
LLM-Enhanced Penetration Testing for Finance: Multi-Agent Architecture & Practice
Black & White Path
Black & White Path
Aug 28, 2026 · Information Security

A Single Missing ‘!’ in nf_tables Triggers Full Root Compromise (CVE‑2026‑23111)

CVE‑2026‑23111 is a local privilege escalation in the Linux kernel’s nf_tables subsystem caused by a reversed conditional in nft_map_catchall_activate(), where the absence of a ‘!’ leads to a use‑after‑free, enabling an attacker to chain UAF, leak kernel addresses, build a ROP payload and gain root.

CVE-2026-23111Linux kernelROP
0 likes · 9 min read
A Single Missing ‘!’ in nf_tables Triggers Full Root Compromise (CVE‑2026‑23111)
Frontline Investigation
Frontline Investigation
Aug 27, 2026 · Information Security

Why More Threat Intelligence Makes Security Decisions Harder

This article explains why accumulating threat intelligence often fails to improve security decisions, and proposes a four-gate framework—relevance, credibility, observability, actionability—to translate external signals into internal judgments, emphasizing TTP-based analysis and reusable judgment processes over raw data collection.

Decision MakingMITRE ATT&CKNIST SP 800-150
0 likes · 10 min read
Why More Threat Intelligence Makes Security Decisions Harder
dbaplus Community
dbaplus Community
Aug 26, 2026 · Information Security

SQLite Got a 9.8 CVE That Was Actually an AI‑Generated Fabrication

An in‑depth investigation reveals that a batch of high‑severity CVE entries for SQLite, including a CVSS 9.8 rating, were fabricated by AI, disproved through independent testing, and later withdrawn by MITRE, exposing flaws in the current vulnerability disclosure process.

AI‑generatedCISACVE
0 likes · 12 min read
SQLite Got a 9.8 CVE That Was Actually an AI‑Generated Fabrication
Black & White Path
Black & White Path
Aug 26, 2026 · Information Security

How to Discover Unauthorized Access on Edu.cn Sites Using Hunter Queries

The article walks through using a Hunter.io query to locate edu.cn domains with registration pages, then demonstrates step‑by‑step vulnerability hunting—including login probing, directory scanning with the findsomething plugin, exposing an unauthenticated admin backend, and leveraging Burp and WPScan to gather sensitive data.

WordPressdirectory scanninghunter.io
0 likes · 3 min read
How to Discover Unauthorized Access on Edu.cn Sites Using Hunter Queries
TechVision Expert Circle
TechVision Expert Circle
Aug 25, 2026 · Information Security

When AI Browsers Get Smarter, Prompt Injection Becomes More Dangerous

Despite layered defenses like input filtering, role isolation, and sandboxed execution, 2026 reports show that prompt‑injection attacks can hijack AI‑enabled browsers to click links, submit forms, leak cookies, and even trigger financial transactions, prompting a detailed analysis of attack vectors, real‑world cases, current mitigations, and emerging defenses.

AI browsersLLM securityPrompt Injection
0 likes · 12 min read
When AI Browsers Get Smarter, Prompt Injection Becomes More Dangerous
Black & White Path
Black & White Path
Aug 25, 2026 · Information Security

Bot and Fraud Detection Complete Guide: Dissecting a Six‑Layer Defense System

The article breaks down bot and fraud detection into a six‑layer onion model, explains the distinction between bots (automation) and fraud (intent), compares manual and automated abuse, and details concrete technical checks—from browser flags and anti‑detection engines to network fingerprints, behavioral biometrics, and business‑logic analysis—illustrated with code snippets, timing attacks, and real‑world examples.

Web Securityanti-botanti‑detection engine
0 likes · 28 min read
Bot and Fraud Detection Complete Guide: Dissecting a Six‑Layer Defense System