Article library
Cybersecurity guides and scripts on hardening, DevSecOps, network analysis, pentesting and AI security.
Security.FuryBee is an English collection of guides about defending systems. The most covered areas are hardening, DevSecOps and AI security, followed by network analysis, pentesting, threat intelligence, cryptography and authentication.
Recent topics include prompt injection, malicious MCP tools, JWT algorithm confusion, SSRF, content security policy and Trusted Types, post-quantum cryptography, NIS2 and DORA, SBOMs and Sigstore, SSH certificates and bastions, and Kubernetes hardening. The guides refer to CIS, ANSSI and NIST material.
Hardening and DevSecOps are the largest categories.
Articles on prompt injection, agent jailbreaks, MCP tool security and AI supply-chain attacks.
SSH hardening, a firewall audit, a log analyzer, a port scanner, an SSL certificate checker and a lightweight intrusion detection script.
Pagefind search and category filters in the browser.
New articles at security.furybee.org/rss.xml.
A static Astro site served by Nginx with Pagefind search. The FuryBee portal reads its RSS feed to list the latest articles on the Articles page.
Ten CVEs fixed in Node.js 26.12.1, 24.22.1 and 22.23.4, including a Brotli decoder out-of-bounds write and several TLS hostname-verification bypasses. Who is exposed, how to audit Docker fleets, and…
Two unauthenticated RCEs fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. What the bugs are, who is exposed, how to patch distro and Docker installs, and the php.ini, FPM, Apache and proxy mitigations…
How attackers wear down users with repeated MFA prompts, why push and SMS codes are weak against it, and how number matching, phishing-resistant factors and monitoring stop it.
What IDOR and broken access control are, why they dominate real-world findings, how to test for them in authorized assessments, and how to enforce authorization correctly.
The content is published for education. The site says that using these techniques on systems without explicit authorization is illegal.
Yes. It has articles on prompt injection, jailbreaking agents, MCP tool security and AI supply-chain attacks.
Six scripts: five in Bash and one in Python, including SSH hardening, a firewall audit and an SSL certificate checker.
Yes, at https://security.furybee.org/rss.xml.
Security.FuryBee lives at security.furybee.org
Open Security.FuryBee
