Compass Security Blog - Offensive Defense

Introduction Pwn2Own is a renowned hacking competition organized by the Zero Day Initiative (ZDI), where security researchers demonstrate previously…

While the full implementation of the Cyber Resilience Act (CRA) won’t take effect until December 2027, another critical milestone is already…

Some months ago, I performed a web application penetration test on an application that used passkey for authentication. As part of the assessment, I…

Pipeleek 1.0 is here. What started as a GitLab pipeline secret scanner now covers seven CI/CD platforms and comes with helpers for runner…

Automation platforms such as n8n are often introduced as productivity tools: connect a few systems, automate repetitive work, maybe add some AI.…