Encryption & Cryptography — przewodnik po ochronie danych
Complete encryption guide: algorithms (AES, RSA, SHA), TLS/SSL, PKI, post-quantum cryptography, key management and data encryption at rest and in transit.
All articles
CVE-2026-81934: Use-After-Free in Redis TLS Handling
A use-after-free in the tlsProcessPendingData() function handling the TLS pending-data list allows a remote, unauthenticated attacker to execute arbitrary commands with Redis server privileges...
CVE-2026-65400: macOS Screen Sharing authentication bypass — CISA deadline August 21
A state management flaw in macOS authentication allows an attacker on the same network to connect to Screen Sharing without knowing the password...
CVE-2026-74872: Arbitrary Code Execution via .so Loading in openssl_encrypt
openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verific...
CVE-2026-74875: JSON Schema Validation Skip in openssl_encrypt
openssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema...
CVE-2026-74876: Unsigned Key Bundle Import in openssl_encrypt
openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers can call from_dict() f...
CVE-2026-74878: TOTP Rate Limit Bypass in openssl_encrypt
openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute authentica...
CVE-2026-74880: Refresh Token Leakage via URL in openssl_encrypt
openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser history...
CVE-2026-74886: Plugin Sandbox Bypass in openssl_encrypt
openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Attacke...
CVE-2026-74889: Weak Key Derivation (HKDF) in openssl_encrypt
openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key...
CVE-2026-74891: Hardcoded Database Credentials in openssl_encrypt
openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known de...
CVE-2026-74894: API Authentication Bypass in openssl_encrypt
openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token function that accepts any non-empty Bearer token string without validation. Attackers can upload ar...
CVE-2026-74895: Missing Plugin Sandbox Isolation in openssl_encrypt
openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to...
CVE-2026-74896: Sandbox Escape via Dunder Attributes in openssl_encrypt
openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers can use _...
CVE-2026-74899: Sandbox Escape via IsolatedPluginExecutor in openssl_encrypt
openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python...
CVE-2026-74900: Deterministic KEM Fallback in openssl_encrypt (PQC)
openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from o...
CVE-2026-74901: Unauthenticated AES-CTR Fallback in openssl_encrypt
openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ...
CVE-2026-15981: authentication bypass via loose openssl_verify check in SAML SSO Login plugin (CVSS 9.8)
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mo_saml_validate_signature() function pe...
CVE-2026-65700: path traversal via bearer token in h2oGPT OpenAI-compatible files API (CVSS 9.8)
h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthenticated remote attackers to read, write, and delete arbitrary files accessible to th...
CVE-2026-65701: Path Traversal in SoftVC VITS Singing Voice Conversion
SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inference server that allows unauthenticated remote attackers to read and exfiltrat...
CVE-2026-64825: Path Traversal in Home Assistant Core
Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafte...
CVE-2026-12701: path traversal in Pulp Project pulpcore FilesystemExport
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such ...
CVE-2026-64620: heap-based buffer overflow in crypto_rsa_common() in FreeRDP (CVSS 9.8)
FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). The function writes the modular-exponentiation result into the call...
CVE-2026-8859: path traversal via Content-Disposition filename in IBM Langflow OSS APIRequest (CVSS 9.9)
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal v...
CVE-2026-43637: Path Traversal (Tar Slip) in PreferredAI Cornac
Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing...
CVE-2026-11563: arbitrary file deletion by low-privileged users in Word Count and Social Shares plugin (CVSS 9.6)
The Word Count and Social Shares WordPress plugin through 1.0 does not validate a user-supplied file path before deletion, nor does it have proper authorization or CSRF checks, allowing any authentica...
CVE-2026-15265: path traversal in Tenable Agent plugin directory
A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged attacker to write arbitrary files outside the intended plugin directory, potentially leading to remote c...
CVE-2026-48318: path traversal enabling arbitrary file read in Adobe ColdFusion (CVSS 9.9)
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this ...
CVE-2026-48319: Path Traversal in Adobe ColdFusion
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current us...
CVE-2026-50522: deserialization of untrusted data in Microsoft Office SharePoint (CVSS 9.8)
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network....
CVE-2026-52533: privilege escalation via etc/shadow in D-Link DIR-1253 (CVSS 9.8)
An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file...
CVE-2026-55040: weak authentication in Microsoft Office SharePoint (CVSS 9.1)
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network....
CVE-2026-58102: heap out-of-bounds read via long extension OID in Perl Crypt::OpenSSL::X509 (CVSS 9.1)
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_...
CVE-2026-58644: deserialization of untrusted data in Microsoft Office SharePoint (CVSS 9.8)
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network....
CVE-2026-57401: path traversal in Brainstorm Force SureDash (CVSS 9.9)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash: from n/a through <...
CVE-2026-40005: path traversal enabling arbitrary file write in Apache IoTDB (CVSS 9.1)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. An attacker can write arbitrary files anywhere the IoTDB process has write permissions wit...
CVE-2026-56765: share hash exposure and cross-project attachment access in Vikunja (CVSS 9.8)
Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-level shares. The Get...
CVE-2026-59792: Path Traversal RCE in JetBrains IntelliJ IDEA
In JetBrains IntelliJ IDEA before 2026.1.4 and 2026.2, code execution via path traversal in project workspace ID handling was possible...
CVE-2026-48908: JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and...
CVE-2026-53481: unauthenticated path traversal in Dell PowerProtect Data Domain (CVSS 9.8)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 throu...
CVE-2026-24014: path traversal via Trigger JAR name in Apache IoTDB DataNode RPC (CVSS 9.8)
Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port i...
CVE-2026-9181: unauthenticated directory traversal in Esri ArcGIS Server (CVSS 9.8)
ArcGIS Server contains a directory traversal vulnerability. An unauthenticated attacker could exploit this issue by sending crafted path parameters. Successful exploitation could allow access to sen...
CVE-2026-45659: Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network....
CVE-2026-50003: path traversal in bit-preserving C-GET storage mode in DCMTK client (CVSS 9.8)
A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths and absolute paths....
CVE-2026-10109: pre-auth DRDA handshake RCE in IBM Db2 (CVSS 9.8)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling....
CVE-2026-48282: path traversal leading to code execution in Adobe ColdFusion (CVSS 10.0)
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execut...
CVE-2026-48313: Path Traversal in Adobe ColdFusion
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system...
CVE-2026-58166: Path Traversal in OpenBMB ChatDev
OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious...
CVE-2025-55017: path traversal in Apache IoTDB
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.6, from 1.0.0 before 1.3.6. Users...
CVE-2025-64152: path traversal in Apache IoTDB
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.6, from 2.0.0 before 2.0.7. Users...
CVE-2025-71334: arbitrary file access via unvalidated chatflowId path traversal in Flowise (CVSS 9.8)
Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in f...
CVE-2025-71338: unauthenticated path traversal to RCE in Flowise document store loader (CVSS 10.0)
Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process endpoint that allows unauthenticated attackers to write arbitrary files to the filesystem. Attackers can ex...
CVE-2026-45405: Symlink Traversal Arbitrary File Write in Dokku
Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:from-archive and certs:add commands extract user-supplied tar/zip archives into temporary directories without sanitizing member paths or preven...
CVE-2026-5366: git flag injection via commit_sha in Prefect GitRepository storage (CVSS 9.9)
Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, which is passed to git...
CVE-2026-54414: path traversal in shared-folder upload enabling admin takeover in FileRise (CVSS 9.8)
FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover. ...
CVE-2026-52703: unauthenticated path traversal in FastDup (CVSS 9.6)
Unauthenticated Path Traversal in FastDup <= 2.7.2 versions....
CVE-2026-50086: unauthenticated AES oracle against platform signing key in Aqara IAM/SSO gateway (CVSS 10.0)
The Aqara IAM/SSO gateway (gw-builder.aqara.com) exposes bidirectional AES round-trups against the platform's signing key without authentication. This is an instance of "CWE-306: Missing Authenticatio...
CVE-2026-53475: Hardcoded Insecure TLS in Red Hat Assisted Migration Agent
A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security (TLS) connections when communicating with vCenter. This vulnerability allows a Man-in-the-Midd...
CVE-2026-53476: path traversal via crafted tarball in assisted-migration-agent (CVSS 9.6)
A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network (LAN), can exploit a path traversal vulnerability. By crafting a specially designed gz...
CVE-2026-40128: Path Traversal in SAP NetWeaver AS Java Web Container
SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and...
CVE-2026-45447: use-after-free during PKCS#7 signature verification in OpenSSL (CVSS 9.8)
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes,...
CVE-2026-35075: Hard-coded password in MBS Universal Gateway (UGW)
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices....
CVE-2026-48866: Path Traversal in WordPress Gravity Forms plugin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rocketgenius Inc. Gravity Forms allows Path Traversal. This issue affects Gravity Forms: from n/a throu...
CVE-2026-34926: Trend Micro Apex One Server Directory Traversal - Actively Exploited (ITW)
Directory traversal in Trend Micro Apex One Server (on-prem, builds < 17079) - a pre-authenticated local attacker with admin credentials can modify a key server table and inject malicious code into agents. Trend Micro confirms active in-the-wild exploitation...
CVE-2026-42756: Path Traversal in WordPress QuickWebP plugin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly quickwebp allo...
CVE-2026-42757: Path Traversal in WordPress WebinarIgnition plugin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Path Traversal.This issue affects Webin...
CVE-2026-34909: Path traversal in Ubiquiti UniFi OS
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an unde...
CVE-2026-7302: Unauthenticated path traversal in SGLang
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by i...
CVE-2026-31230: Argument Injection in Adversarial Robustness Toolbox
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py). The script uses the uns...
CVE-2026-41551: Path Traversal in Siemens ROS#
Path traversal vulnerability in Siemens ROS# (versions prior to 2.2.2) allows a remote attacker to access arbitrary files due to insufficient sanitization of user input...
CVE-2026-8153: OS command injection in Universal Robots PolyScope
OS command injection in Dashboard Server interface in Universal Robots PolyScope prior to 5.21.1 allows unauthenticated attackers to execute arbitrary code on the robot's OS. No authentication required...
CVE-2026-40982: Directory Traversal in VMware Spring Cloud Config
Directory traversal vulnerability in VMware Spring Cloud Config (versions 3.1.0-3.1.13 and 4.1.0-4.1.9) allows attackers with crafted URLs to access arbitrary files via the spring-cloud-config-server module...
CVE-2026-7411: Path Traversal RCE in Eclipse BaSyx Java Server SDK
In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perform a path traversal atta...
CVE-2026-42482: Stack buffer overflow in hashcat mangle_to_hex
A stack-based buffer overflow in mangle_to_hex_lower() and mangle_to_hex_upper() in src/rp_cpu.c in hashcat v7.1.2 allows an attacker to cause denial of service or possibly execute arbitrary code via a crafted rule file or long password candidates.
CVE-2026-42483: Heap buffer overflow in hashcat Kerberos hash parser
A heap-based buffer overflow in the Kerberos hash parser in hashcat v7.1.2 allows an attacker to cause denial of service or possibly execute arbitrary code via a crafted Kerberos hash file.
CVE-2026-42484: Heap buffer overflow in hashcat PKZIP hash parser
A heap-based buffer overflow in hex_to_binary in the PKZIP hash parser in hashcat v7.1.2 allows an attacker to cause denial of service or possibly execute arbitrary code via a crafted PKZIP hash file.
CVE-2026-5166: Path Traversal in TUBITAK BILGEM Pardus Software Center
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in TUBITAK BILGEM Pardus Software Center allows path traversal. Affects Pardus Software Center before 1.0.3.
CVE-2026-32644: Default SSL private keys in Milesight AIOT cameras
Specific firmware versions of Milesight AIOT cameras use SSL certificates with shared default private keys, enabling man-in-the-middle attacks against camera traffic...
CVE-2026-40050: Unauthenticated path traversal in CrowdStrike LogScale
CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale. This vulnerability only requires mitigation by customers that...
CVE-2025-2749: Kentico Xperience Path Traversal Vulnerability
Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations....
CVE-2026-32201: Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform spoofing over a network....
CVE-2026-39813: Path traversal in Fortinet FortiSandbox
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via <insert attack vector here...
CVE-2026-28373: Path traversal in Stackfield Desktop App
The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property. A malicious export can...
CVE-2026-2699: Unauthenticated configuration access in Citrix ShareFile Storage Zones Controller
Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote ...
CVE-2026-2701: Authenticated file upload RCE in Citrix ShareFile Storage Zones Controller
Authenticated user can upload a malicious file to the server and execute it, which leads to remote code execution....
CVE-2026-34877: Memory corruption in Mbed TLS
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the seri...
CVE-2026-34872: Contributory-behavior flaw in FFDH in Arm Mbed TLS
An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH due to improper input validation. Using finite-field Diffie-He...
CVE-2026-34875: Buffer overflow in Mbed TLS
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys....
CVE-2026-4599: Critical Vulnerability in npm jsrsasign - Immediate Update Required
Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functio...
CVE-2026-22557: Critical Path Traversal in Ubiquiti UniFi Network (CVSS 10.0)
Critical Path Traversal vulnerability in Ubiquiti UniFi Network Application (CVSS 10.0) allows unauthenticated attackers to access OS files and achieve account takeover. Affects Dream Machine and all UniFi Network Application installations <= 10.1.85.
CVE-2026-20963: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network....
Cybersecurity Act: six and a half years of certification in the EU - assessment and perspectives
The Cybersecurity Act was meant to create a unified European cybersecurity certification system. After six and a half years since entering into force - what has been achieved, and what remains a challenge?
AI Security — How to Protect Machine Learning Models and Training Data from Attacks
AI models and training data are prime attack targets. Learn how to protect AI systems from model theft, data poisoning, and adversarial sample attacks in production.
CVE-2025-15036: Path traversal in MLflow extract_archive_to_dir
A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present ...
Threat Intelligence Sharing — Benefits of Collaboration in Cybersecurity
Threat Intelligence Sharing — how exchanging cyber threat information between organizations strengthens defense, accelerates detection, and builds resilience across entire sectors.
Active Directory Hardening — How to Secure the Foundation of Your Windows Infrastructure
Active Directory hardening step by step: tiering model, LAPS, privileged account protection, Event ID monitoring and recovery plan after full compromise of your AD.
What is CORS (Cross-Origin Resource Sharing) and how does it work?
: CORS is a fundamental security mechanism in modern web applications. Understand how it works, what
Wireshark - What is it, how to use it and what is it used for?
Learn about Wireshark, an advanced network traffic analysis tool that enables you to capture and examine in detail data packets transmitted over your network. Learn how Wireshark supports the diagnosis of network problems, performance monitoring and ensuring the security of your IT infrastructure.
What Is the SHA-256 Algorithm and How Does It Work?
Learn what the SHA-256 algorithm is, how it works, and why it is crucial for cryptographic security.
Sharenting - What It Is, Examples, and Threats
Learn what sharenting is, what threats it poses, and how to responsibly share photos and information about children online.
What is PKI - Public Key Infrastructure? Definition, Key Components, Role, Practical Applications, Standards, Challenges and Benefits
PKI is a public key infrastructure ensuring secure network communication. Learn about its key components and applications.
What is Shadow IT? Impact, Examples, Causes, Consequences, Prevention and Building Awareness
Shadow IT refers to unauthorized technologies in companies that can pose data security threats. Learn how to prevent it.
Crossing AI Boundaries: How the European AI Act Shapes the Future of Technology in Harmony with IBM watsonx
European AI Act and IBM Watsonx from nFlo: shaping the future of technology. Learn about the impact of regulations on AI development.
Need a cryptographic audit?
nFlo offers cryptographic inventory, TLS/SSL audit and post-quantum cryptography migration consulting.
Want to Reduce IT Risk and Costs?
Book a free consultation - we respond within 24h
Or download free guide:
Download NIS2 Checklist