Cyber SecurityIntermediate
Recover a Compromised Email Account: Close Every Route Back In
A practical recovery sequence for Gmail and personal Outlook accounts: secure access, revoke sessions, inspect forwarding and protect connected accounts.
← The research library
Identity security.
Authentication, permissions and credential lifecycles for people, devices and software.
IoTIntermediate
Aliro and Smart Locks: Plan Credential Removal and Recovery
Understand Aliro 1.0’s role in digital access, then review guest expiry, lost-phone recovery, offline behavior and ownership transfer for a specific lock.
IoTDeep Dive
MQTT Security: Authentication Is Not Topic Authorization
Design MQTT permissions around publish and subscribe actions, test cross-device access and retained-message behavior, and avoid shared administrator credentials.
Artificial intelligenceDeep Dive
MCP Authorization in 2026: Tokens, Audiences and Trust Boundaries
Review HTTP-based MCP authorization against the July 2026 specification, with audience checks, separate downstream grants and safe metadata handling.
Cyber SecurityBeginner
Domain Security: Protect Registrar Access and DNS Recovery
Map domain ownership, registrar access, DNS administration and recovery dependencies before a lost account or unauthorized change disrupts your site.
Cyber SecurityDeep Dive
PHP Session Security: Login, Regeneration and Revocation
Review PHP sessions from login to logout: strict mode, cookie settings, safe ID regeneration, timeout enforcement and server-side revocation tests.
Cyber SecurityDeep Dive
Workload Identity Federation: Retire Long-Lived Service Keys
Map service accounts, constrain federated identity claims and test negative cases before replacing a stored deployment key with short-lived credentials.
Cyber SecurityIntermediate
OAuth App Consent: Review Permissions and Revoke Access
Audit connected applications by publisher, permissions, data access and owner. Plan a safe consent review and verify what revocation actually removes.
Cyber SecurityIntermediate
Passkeys, MFA Fatigue and Session Theft: Protecting the Whole Sign-In Journey
Passkeys strengthen sign-in, while session handling and recovery need separate controls. Review phishing resistance, active sessions and account recovery together.
Cyber SecurityIntermediate
A Practical Cybersecurity Toolkit: Choose and Test Your Controls
Build a manageable security toolkit for accounts, devices, networks and backups. Use harmless acceptance checks to find gaps before you depend on a control.
Cyber SecurityIntermediate
Cloud Security Checklist: Access, Sharing and Recovery
Start with who can reach your data, what they can change, and how you would recover it. Use this service-by-service checklist to review cloud permissions, sharing and backups.
Cyber SecurityIntermediate
VPN vs Zero Trust: How to Evaluate Remote Access
A protected network connection and permission to use an application solve different problems. Evaluate remote access through a bounded pilot with clear allowed and denied actions.