https://hackyjs.com/posts/analyzing-the-ai-phishing-kit-used-against-spanish-holiday-bookings-a-developers-field-guide Hacky JS en 2026-07-12T00:00:00.000Z Analyzing the AI Phishing Kit Used Against Spanish Holiday Bookings: A Developer’s Field Guide cybersecurity, phishing, ai-security, travel-security https://hackyjs.com/posts/anatomy-of-the-gitea-docker-image-authentication-bypass-and-how-to-fix-it Hacky JS en 2026-07-12T00:00:00.000Z Anatomy of the Gitea Docker Image Authentication Bypass and How to Fix It gitea, docker, security, authentication-bypass, vulnerability https://hackyjs.com/posts/auditing-npm-integrity-after-the-jscrambler-incident-what-code-signing-misses Hacky JS en 2026-07-12T00:00:00.000Z Auditing npm Integrity After the Jscrambler Incident: What Code Signing Misses npm, supply-chain-security, code-signing, package-integrity https://hackyjs.com/posts/auditing-u-boot-bootloader-fit-images-for-cve-2026-46728-the-signature-flaw-that-undermines-secure-boot-on-embedded-linux Hacky JS en 2026-07-12T00:00:00.000Z Auditing U-Boot Bootloader FIT Images for CVE-2026-46728: The Signature Flaw That Undermines Secure Boot on Embedded Linux u-boot, embedded-linux, secure-boot, firmware-security, cve-2026-46728 https://hackyjs.com/posts/zimbras-web-client-xss-why-a-reflected-bug-became-a-full-account-takeover Hacky JS en 2026-07-12T00:00:00.000Z Zimbra's Web Client XSS: Why a Reflected Bug Became a Full Account Takeover zimbra, xss, account-takeover, web-security