The Internet of Things is a Complete Mess (and how to Fix it)Troy Hunt·Jul 13, 09:59 UTC · Jul 13, 2021Vulnerability30
New Pluralsight Course: Modern Browser Security ReportsTroy Hunt·Aug 8, 07:22 UTC · Aug 8, 2018Vulnerability30
Here's Why Your Static Website Needs HTTPSTroy Hunt·Jul 13, 07:22 UTC · Jul 13, 2018VulnerabilityCVE-2018-1252960
I'm Sorry You Feel This Way NatWest, but HTTPS on Your Landing Page Is ImportantTroy Hunt·Dec 14, 21:17 UTC · Dec 14, 2017Vulnerability30
What Would It Look Like If We Put Warnings on IoT Devices Like We Do Cigarette Packets?Troy Hunt·Oct 14, 09:23 UTC · Oct 14, 2017Vulnerability42
Password managers don't have to be perfect, they just have to be better than not having oneTroy Hunt·Apr 4, 11:15 UTC · Apr 4, 2017Vulnerability42
Is Enumerating Resources on a Website "Hacking"?Troy Hunt·Apr 19, 23:04 UTC · Apr 19, 2018Vulnerability30
The Effectiveness of Publicly Shaming Bad SecurityTroy Hunt·Sep 11, 08:51 UTC · Sep 11, 2018Vulnerability30
New Pluralsight Course: Bug Bounties for CompaniesTroy Hunt·May 24, 08:04 UTC · May 24, 2018Vulnerability30
Report URI Just Won the Best Emerging Technology Award!Troy Hunt·Jun 9, 05:58 UTC · Jun 9, 2018Vulnerability42
How Chrome's buggy content security policy implementation cost me moneyTroy Hunt·Dec 7, 20:32 UTC · Dec 7, 2016VulnerabilityCVE-2016-522535
The Capgemini leak of Michael Page data via publicly facing database backupTroy Hunt·Nov 11, 21:42 UTC · Nov 11, 2016Vulnerability30
Introducing you to browser security headers on PluralsightTroy Hunt·Aug 31, 23:00 UTC · Aug 31, 2015Vulnerability30
Do you trust your hosting provider and have they really installed the padding oracle patch?Troy Hunt·Sep 28, 23:00 UTC · Sep 28, 2010Vulnerability55
Add-ons, Extensions and CSP Violations: Playing Nice with Content Security PoliciesTroy Hunt·Nov 14, 12:03 UTC · Nov 14, 2018Vulnerability30
Kids Pass Just Reminded Us How Hard Responsible Disclosure IsTroy Hunt·Jul 31, 07:47 UTC · Jul 31, 2017Vulnerability30
Soft-Launching and Open Sourcing the Have I Been Pwned RebrandTroy Hunt·Mar 11, 19:56 UTC · Mar 11, 2025Vulnerability130
Thanks FedEx, This is Why we Keep Getting PhishedTroy Hunt·Feb 24, 00:41 UTC · Feb 24, 2024Vulnerability30
Over 780,000 email accounts compromised by Emotet have been securedThe Record·Dec 13, 00:00 UTC · Dec 13, 2022Vulnerability30
2020 (ISC)² Global Achievement Awards: Celebrating achievements in cybersecurityHelp Net Security·Jan 11, 11:30 UTC · Jan 11, 2021Vulnerability30
Critical Grindr Account Takeover Bug Rings Alarm BellsInfosecurity Magazine·Oct 5, 10:20 UTC · Oct 5, 2020Vulnerability55
Friday Squid Blogging: Giant Squid Caught Off the Coast of IrelandSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability30
8 million GitHub profiles scraped, data found leaking onlineHelp Net Security·Oct 15, 09:05 UTC · Oct 15, 2018Vulnerability30
Half of Alexa Top 1 Million sites now use HTTPSHelp Net Security·Aug 29, 00:00 UTC · Aug 29, 2018Vulnerability30
IRL Analogies Explaining Digital Concepts are TerribleTroy Hunt·Apr 23, 09:24 UTC · Apr 23, 2018Vulnerability55
Unprotected database exposes VINs, owner info of 10 million carsHelp Net Security·Jun 9, 16:08 UTC · Jun 9, 2017Vulnerability30
New Pluralsight course: Exploring the Internet of VulnerabilitiesTroy Hunt·Nov 14, 09:24 UTC · Nov 14, 2016Vulnerability30
Millions of job seekers' info exposed via easily accessible database backupsHelp Net Security·Nov 11, 00:00 UTC · Nov 11, 2016Vulnerability42