Featured
OpenClaw 2.0: rethinking security for AI agents
The open source project for autonomous AI agents ships its largest update yet, almost entirely dedicated to closing the security gaps typical of letti...
f-hack
The Italian blog on cybersecurity
Articles, guides and tutorials on cybersecurity, ethical hacking, penetration testing and web app security.
> Featured Articles
Featured
How Secure Is the Italian Web? First Results from the IWSS Study on 10,020 .it Domains
IWSS, F-Hack's research across 10,022 .it domains: no security header exceeds 42% adoption, fewer than 1% of CSPs are actually restrictive, only 2.4% ...
Featured
Vercel Breach 2026: Anatomy of a Supply Chain Attack via OAuth
An infostealer on a Context.ai employee's PC triggered a chain of compromises that reached Vercel's internal systems. Here's how it happened, what was...
> Latest Articles
Fail2ban non banna gli IP: diagnosi tra log, filtri e reverse proxy
Fail2ban configurato ma gli attacchi continuano? Diagnosi tra IP visto dall'app, log nginx dietro reverse proxy/Cloudflare, e punto effettivo di enfor...
[DA CANCELLARE - test Faro] safe to delete
Test
How to install nmap on Ubuntu, Fedora and Linux Mint
The commands to install nmap on the main Linux distributions, how to verify the installation worked, and how to run your first scan without making com...
Burp Suite vs OWASP ZAP: a practical comparison for web testing
A practical comparison of Burp Suite and OWASP ZAP: proxy, Repeater, scanner, automation, extensions, false positives and cost.
FTP banner dead drop: analyzing E4del and PINHOLE RAT
How E4del and PINHOLE RAT use the FTP banner as a dead drop to receive commands, with PCAP analysis, Suricata rules and hardening.
Decryption: How to Decrypt Data with AES and RSA
Decrypting isn't magic: you need the right key, the correct IV or nonce, and to know which mode was used to encrypt. Here's how it works with AES and ...
Backdoor: What It Is, How It Works and How to Recognize It
What a backdoor is, how it differs from viruses and trojans, how it gets installed on a system, and the signs that help you spot one in time.
Symmetric Cryptography, Asymmetric Cryptography and Hashing: How They Work
AES encrypts fast with a shared key. RSA solves the distribution problem with two keys. SHA-256 doesn't decrypt anything. Three different tools for th...
Stay up to date on cybersecurity
Follow us on social media so you don't miss the latest articles, news and cybersecurity tutorials.