Compass Security Blog - Offensive Defense

Introduction Pwn2Own is a renowned hacking competition organized by the Zero Day Initiative (ZDI), where security researchers demonstrate previously…

Lire la suite

While the full implementation of the Cyber Resilience Act (CRA) won’t take effect until December 2027, another critical milestone is already…

Lire la suite

Some months ago, I performed a web application penetration test on an application that used passkey for authentication. As part of the assessment, I…

Lire la suite

Pipeleek 1.0 is here. What started as a GitLab pipeline secret scanner now covers seven CI/CD platforms and comes with helpers for runner…

Lire la suite

Automation platforms such as n8n are often introduced as productivity tools: connect a few systems, automate repetitive work, maybe add some AI.…

Lire la suite