Bez kategorii

Guide to Cybersecurity Certifications with Ranking — 2026 Update (the AI Era)

By Michał | August 10, 2026 - 9:27 pm |August 12, 2026 Bez kategorii

Cybersecurity certifications 2026 — ranking, prices and the AI era (updated guide)

Two years ago I published a ranking of cybersecurity certifications — and a lot has come crashing down since. CASP+ formally no longer exists, OSCP got an expiration date, the free ISC2 exam is no longer free, and AI has started closing the industry’s door on juniors. I repeated my Indeed job-posting analysis after two years: some certifications grew by over 200%, others dropped by half. 💥 In the updated guide you’ll find the 6-level ranking, current prices for all 21 certifications, and hard data on what AI has changed. Continue reading →

Example password policy — 2026 update (NIST SP 800-63B-4)

By Michał | July 23, 2026 - 2:00 pm |July 24, 2026 Bez kategorii

Leave a comment

An example password policy aligned with NIST SP 800-63B-4: min. 15 characters, no forced complexity or periodic rotation, blocklists, Argon2id, a password manager and phishing-resistant MFA. Continue reading →

What Can Examining Server Response Time Tell Us?

By Michał | June 11, 2024 - 9:45 pm |June 11, 2024 Bez kategorii

Leave a comment

Assuming that the server takes actions based on a certain condition, let’s analyze a scenario where the server performs computations depending on the result of that condition and then returns a response to the user. In both cases, whether the computations are performed or not, the server returns a response… Continue reading →

Will AI Take Over Jobs in Cybersecurity? Quite the Opposite – Example of XSS in Zoomin!

By Michał | June 11, 2024 - 8:56 pm |June 11, 2024 Bez kategorii

Leave a comment

In the context of the growing role of artificial intelligence (AI) in various fields, the question of its impact on the job market in cybersecurity is becoming increasingly relevant. On one hand, automation and intelligent systems can significantly speed up and streamline processes related to data and IT infrastructure protection…. Continue reading →

Biometrics are safer – how malware robs Android users

By Michał | June 11, 2024 - 2:25 pm |June 11, 2024 Bez kategorii

Leave a comment

This post was inspired by the excellent presentation by Jan Seredynski from THS 2023. Cybersecurity is not a binary issue – there are no solutions that guarantee 100% security. In reality, it is more about risk assessment and choosing solutions that are less vulnerable to attacks. An example of such… Continue reading →

Cracking a password-protected PDF in seconds – PZU and their illusory protection. NN Investment Partners also repeats these bad practices.

By Michał | June 10, 2024 - 4:17 pm |June 10, 2024 Bez kategorii

Leave a comment

The illusion of security is worse than the awareness of its absence because it leads to decisions made on false premises. Information conveyed by public trust institutions such as “We protect your personal data” often creates this illusion of security. Let’s study two examples of this using password-protected PDF files…. Continue reading →

Hidden Data in Files – How Metadata Can Be Useful in Penetration Testing

By Michał | June 9, 2024 - 4:45 pm |June 9, 2024 Bez kategorii

Leave a comment

Many file formats, besides presenting content, such as JPEG showing a taken photo, can contain metadata. This hidden information can be invaluable during OSINT investigations and penetration tests. Let’s look at some cases and tools useful for extracting these seemingly hidden pieces of information. Not Cleaning Metadata from Photos The… Continue reading →

Most useful plugins for Burp Suite

By Michał | October 21, 2023 - 5:06 pm |October 21, 2023 Bez kategorii

Leave a comment

This post is a supplement to my presentation at The Hack Summit 2023, where I will demonstrate how to accelerate and streamline web application penetration testing using several plugins for Burp Suite. Below is a compilation of the most useful plugins for Burp Suite that I personally use. Some of… Continue reading →

Optimizing IP camera configuration

By Michał | March 23, 2021 - 9:36 pm |March 23, 2021 Bez kategorii

Leave a comment

This manual shows you how to set up your IP camera. The model screenshots were taken from the IPCAM PTZ camera model C6F0SgZ3N0P6L2, however, the same settings can be applied to most brands. Cameras that will have very similar settings are Clearview, Dahua, Hikvision, Gise and Qsee. Format Video To… Continue reading →

Some statistics from pentester's work 2018-2020

By Michał | February 4, 2021 - 9:47 pm |July 29, 2021 Bez kategorii

Leave a comment

I have been collecting statistics from my computer security research for the last few years. I decided to share them a bit. Here you can find a sample penetration test report – report. In a large number of interviews with penetration testers, I hear the question – "Has the security… Continue reading →

Category Archives: Bez kategorii

Guide to Cybersecurity Certifications with Ranking — 2026 Update (the AI Era)

Example password policy — 2026 update (NIST SP 800-63B-4)

Will AI Take Over Jobs in Cybersecurity? Quite the Opposite – Example of XSS in Zoomin!

Biometrics are safer – how malware robs Android users

Cracking a password-protected PDF in seconds – PZU and their illusory protection. NN Investment Partners also repeats these bad practices.

Hidden Data in Files – How Metadata Can Be Useful in Penetration Testing

Most useful plugins for Burp Suite

Optimizing IP camera configuration

Some statistics from pentester's work 2018-2020

Subscription

Wspieraj tę stronę