Misconfigurations & Fixes
The Web Security Audit: 7 Critical Settings We Find Misconfigured in 80% of Websites
February 19, 2026
Misconfigurations & Fixes
The CORS Conundrum: A Simple Guide to Fixing a Common but Confusing Web Security Issue
February 15, 2026
Misconfigurations & Fixes
The Firewall Audit: A Network Security Engineer’s Guide to the Most Dangerous Rule Misconfigurations
February 13, 2026
Misconfigurations & Fixes
Is Your Website Leaking Its Source Code? A Simple Guide to a Critical Misconfiguration
February 12, 2026
Misconfigurations & Fixes
I Found Directory Listing Enabled on a Major Website—Here’s How I Reported It and Why It’s So Dangerous
February 10, 2026
Misconfigurations & Fixes
The Auditor’s Top 10: A Professional’s List of the Most Common and Critical Security Misconfigurations
February 9, 2026
Misconfigurations & Fixes
Our Load Balancer Was Misconfigured and Bypassing Our Firewall—Here’s How We Fixed It
January 6, 2026
Misconfigurations & Fixes
What Is an Open Redirect? A Simple Guide to a Common and Dangerous Web Flaw
January 3, 2026
Misconfigurations & Fixes
We Found an Exposed .env File with API Keys and Database Passwords—Here’s How
January 2, 2026
Misconfigurations & Fixes
Are Your Old Backups a Security Risk? A Simple Guide to a Common and Dangerous Mistake
January 2, 2026
Misconfigurations & Fixes
We Found a Misconfiguration That Allowed Us to Bypass 2FA on a Major Service—Here’s How
October 15, 2025
Misconfigurations & Fixes
The Email Server Fortress: A Sysadmin’s Guide to Hardening Postfix/Exim and Stopping Spam
October 13, 2025
Misconfigurations & Fixes
Our Site Went Down for 6 Hours Because of This One Tiny Misconfiguration—A Post-Mortem
October 9, 2025