Topic
Cybersecurity
Labs, write-ups, CTFs, tooling and research, blue team and red team.
Projects using this
Pinned
All articles
Checking fiventhree.com for the October 2026 Node CVEs
A routine ask: make sure nothing on the VPS was exposed to recent Node.js or PHP CVEs. There was no PHP to check, and Node turned out to be running an end-of-life line that a real security release had just skipped over.
A full security audit of fiventhree.com, and the bug it found
An external and internal audit of the whole domain, five subdomains in. Most of it held up. One header fix turned out to be silently ignored in production for a reason worth knowing about.