Compass Security Blog - Offensive Defense

Introduction Pwn2Own is a renowned hacking competition organized by the Zero Day Initiative (ZDI), where security researchers demonstrate previously…

Read more

While the full implementation of the Cyber Resilience Act (CRA) won’t take effect until December 2027, another critical milestone is already…

Read more

Some months ago, I performed a web application penetration test on an application that used passkey for authentication. As part of the assessment, I…

Read more

Pipeleek 1.0 is here. What started as a GitLab pipeline secret scanner now covers seven CI/CD platforms and comes with helpers for runner…

Read more

Automation platforms such as n8n are often introduced as productivity tools: connect a few systems, automate repetitive work, maybe add some AI.…

Read more