Guides & How-tos · Worked examples · Real numbers

Cybersecurity guides

Step-by-step how-tos, head-to-head comparisons and honest roundups — every guide worked through with current figures, then backed by a RECATOOLS calculator or AI-directory entry so you can act on it.

372 guides published 17 topic areas Latest guide Sep 2026

All 372 AI & ML 60 Developer Tools 56 Finance 39 Chinese Culture 36 Cybersecurity 30 Science 24

Advertisement

A desktop hard drive, a laptop hard drive and a small external SSD laid out side by side on a white surface.

Cybersecurity 7 min

Nobody has required a seven-pass disk wipe since 2006

Disk utilities still offer a seven-pass erase labelled "DoD 5220.22-M". The Department of Defense removed overwriting sp...

A close-up of a laptop keyboard, the keys backlit in blue.

Cybersecurity 4 min

NIST forbids the password rules most companies still enforce

Character-mix requirements and ninety-day expiry are not NIST recommendations that have gone out of fashion. The current...

Coloured source code on a dark editor screen, photographed at an angle

Cybersecurity 5 min

Sixteen different base64 strings decode to the same byte

Base64 leaves four bits free when it encodes a single byte, and RFC 4648 binds encoders with MUST while granting decoder...

Advertisement

A close-up of a laptop keyboard and trackpad with a small fingerprint reader beside it

Cybersecurity 6 min

WebAuthn tells your server to ignore the bit that proves two factors

One flag distinguishes a passkey login that used only the device from one that also took a PIN or fingerprint. The spec...

A close view of a server rack lit in blue, showing rows of drive bays and status indicators

Cybersecurity 6 min

The DMARC tag that meant 10% of the time now means all the time

RFC 9989 removed the pct tag in May 2026, and the same document says receivers must ignore tags that are not registered....

Close-up of the round metal keys of an antique typewriter in black and white, showing the letters A, S, D, Z and X beside a shift-lock key labelled in Spanish.

Cybersecurity 7 min

The lookalike domain that is blocked on .com and shown on .ru

The famous all-Cyrillic apple.com impersonation was patched in 2017 and the matter filed as closed. Both major browsers...

Four banks of narrow metal mailboxes mounted on a weathered wooden wall, each box a different faded colour and several numbered by hand, with a rusted tin canopy above them.

Cybersecurity 5 min

Three DNS Records Almost Nobody Publishes

DNSSEC, CAA and MTA-STS each protect people who will never know they exist. Across 18 major ASEAN banks, government port...

A blue coin-operated seafront viewer on a concrete plinth, pointed out across flat grey water under a heavy overcast sky, with a low treeline on the far shore.

Cybersecurity 6 min

What Your Own Domain Tells a Stranger

OSINT needs no budget and no access. We ran it against our own domain and found 26 robots.txt rules naming /admin/ and /...

A large rusted iron padlock hanging from the hasp of a heavy studded wooden door. Its shackle is swung open and unlatched, so the lock is in place but fastening nothing.

Cybersecurity 6 min

Many Security Policies Permit the Attacks They Are Meant to Block

Eighteen ASEAN banks, government portals and telcos send a mean of 3.7 of 5 browser-protection headers, which is better...

A brass seal stamp bearing a lion crest, lifted just clear of the red wax it has pressed into an old handwritten document. The wax has spread beyond the impression and the script underneath is still legible at the edges.

Cybersecurity 6 min

Signed Is Not the Same as Traceable

Every package npm serves carries a registry signature, so 100% of our dependencies look verified. Only 10.8% of the ones...

A plain brass padlock fastened through the steel latch of a shipping container door, photographed close up. The door behind it is painted teal and covered in graffiti, and the latch and bolt heads are scuffed with use.

Cybersecurity 6 min

Most of an AI Attack Is an Ordinary Attack

MITRE's AI threat matrix, ATLAS, shares 13 of its 16 tactics with classical ATT&CK. Only two are genuinely new — and jus...

A close-up of a brushed steel combination dial set into a pale safe door, its numbered ring running from zero to ninety around a knurled centre knob.

Cybersecurity 6 min

What Shor's Algorithm Actually Breaks

Shor's method is ordinary arithmetic with one quantum step inside it. We ran the classical part exhaustively over sixtee...

Red, yellow and green network patch cables plugged into the lit ports of a rack-mounted switch, with more cabling running out of focus behind it.

Cybersecurity 7 min

How Big Are Post-Quantum Encryption Keys?

We measured two live handshakes to our own site. Hybrid post-quantum key exchange adds 1,178 bytes to the ClientHello —...

Two black rubber stamps with cream-coloured pads stand on a sheet of white paper beside a pair of ballpoint pens, a black binder clip and a row of red, green and blue paper clips, against a deep blue background.

Cybersecurity 9 min

How Much of ISO 27001 Can You Actually Automate?

ISO/IEC 27001:2022 has 93 Annex A controls. Our 27 automated compliance checks cover 18 of them — not quite a fifth — an...

A vertical run of weathered steel chain links in close focus, each link interlocking with the next, against a blurred grey and green background.

Cybersecurity 10 min

What Our Own Security Audit Found

Nine parallel red-team reviews of our own admin panel produced twelve security findings. Eleven are closed, including al...

A magnifying lens held over a dictionary page, enlarging the entries love, and low, — two words a single deleted letter apart.

Cybersecurity 7 min

How to Check Who Owns the Lookalikes of Your Domain

Five edit rules per character generate the confusable space around a domain name, and DNS says which of those names alre...

A dense curtain of fibre-optic strands lit from within against a dark background.

Cybersecurity 6 min

The Post-Quantum Migration Already Started, and Nobody Told You

Quantum computing and encryption is usually framed as a countdown. For the connections you actually use, the migration h...

A person at a desk opening a paper document beside a laptop, with a cup and flowers on the table.

Cybersecurity 7 min

How Many Domains Does Your Bank Send Email From?

Every scam-email guide ends with "check the sender", which assumes a bank is a domain. We read the published records for...

A traveller sitting at an airport gate with a laptop, an aircraft visible through the window behind.

Cybersecurity 8 min

Public Wi-Fi: The Warning Is Out of Date, the Exposure Is Not

All eight sites we checked end on HTTPS and all eight set HSTS, so nobody on the café network can read what you send — i...

A card on a restaurant table inviting diners to scan a code to order.

Cybersecurity 6 min

What Does a QR Code Actually Store? You Cannot Tell by Looking

Two codes pointing at two different sites differ in 35.6 per cent of their squares — and no human can tell, because nobo...

A cast metal letter slot in a door, embossed with the word LETTERS.

Cybersecurity 6 min

Is This Email Really From Them? The Check You Cannot See

The sender name is free text and the address can be forged. The real check happens in DNS before the message reaches you...

A rusted brass padlock hanging on a weathered green painted door.

Cybersecurity 7 min

What Does the Padlock Actually Prove? We Read Six Real Certificates

It certifies that the connection is encrypted and that the name in the address bar matches the certificate. It says noth...

A phone face-down on a wooden desk beside an open paper notebook and a pen, under a single warm desk lamp

Cybersecurity 9 min

Account Security You Can Finish in an Afternoon

Four jobs, ordered by how much loss each one prevents, with the arguments settled by the standard rather than by folklor...

A small shopfront office at night, one desk lamp and a monitor still lit behind the window, the rest of the street in darkness.

Cybersecurity 10 min

Cybersecurity for a Small ASEAN Business

Until this week our own password checker rated Summer2026 as Fair. It is not fair — it is one of the first few hundred g...

Showing 1–24 of 30 results

← Prev 1 2 Next →

Advertisement