News and insights from the world of cybersecurity

Follow our blog to stay updated on the latest cybersecurity news and trends. Get an overview of our projects and insights.

JWT token security, algorithm confusion attack and best practices for JSON Web Tokens

JWT Security: Vulnerabilities, Attacks and Best Practices

August 4, 2026

How pentesters break JSON Web Tokens - algorithm confusion, weak HMAC secrets, kid and jku injection, claim validation flaws - and the defenses that stop them.

Denial-of-Wallet (DoW) attack inflating the API token and GPU costs of an AI RAG system

Denial-of-Wallet (DoW): How RA-ICA Attacks Inflate AI and RAG System Costs

June 8, 2026

Learn how a new type of cyberattack, RA-ICA, quietly drains API tokens and inflates the running costs of corporate AI and RAG systems by up to 1,300%.

Protecting children online, privacy and deepfake risks

Protecting Children Online: Privacy, Deepfake Risks and EU Age Verification

May 4, 2026

A practical guide for parents and schools on protecting children online from cyberbullying, phishing, grooming, deepfake misuse and harmful content.

Artificial intelligence as defense in cybersecurity

Artificial Intelligence as Defense: How AI Helps Cybersecurity

May 2, 2026

AI is not only a threat. It helps detect phishing, analyze incidents, filter threats and speed up the response of security teams.

What Is AI Phishing and How to Recognize It? A Practical Guide

April 30, 2026

AI phishing is more convincing than ordinary scam messages. Learn how to recognize email phishing, smishing, vishing and spear phishing.

April 2026 cybersecurity throwback red-team lessons for companies

April 2026 Cybersecurity: Red-Team Analysis

April 30, 2026

Red-team analysis of April 2026: Copy Fail, npm supply chain, AI security, OAuth, CI/CD, cloud, vulnerability management and incident response.

Deepfake Scams and Vishing: How to Recognize a Fake Voice and Video

April 30, 2026

Deepfake voice and vishing can imitate a CEO, colleague or family member. Learn the warning signs and how to verify suspicious calls.

Mythos, Aardvark and AI Vulnerability Discovery: The Future of Cyberattacks?

April 30, 2026

AI models such as Mythos and Aardvark show that vulnerability discovery can become faster and more automated. What does this mean for businesses?

AI and OSINT: How Attackers Use Public Information Online

April 30, 2026

Attackers use LinkedIn, social media and company websites to build personalized scams. Learn how OSINT, AI and pretexting work in real attacks.

AI as an Attacker: Phishing, Deepfakes and New Cyber Threats

April 29, 2026

Artificial intelligence is changing phishing, deepfake scams and vulnerability discovery. Learn how attackers use AI and how to protect your business.

CVE-2026-24061 telnetd authentication bypass

CVE-2026-24061: The Telnetd Bug That Turns "Secure" Networks Into Root Access

February 2, 2026

CVE-2026-24061 is a critical GNU InetUtils telnetd authentication bypass that can grant unauthenticated root access. Learn what happened, why even well-maintained networks are at risk, and why assumed breach penetration testing matters.

How an Ethical Hacker Works: “Rape with Consent”, Penetration Tests, North Korea and Elections on Facebook

November 14, 2025

How an ethical hacker works, what “rape with consent” means, how banks and clouds are tested, why North Korea steals crypto – and how you can be hacked without noticing.

Haxoris on Stage: Mobile App Security Conference in Prague

November 4, 2025

The Haxoris team took the stage at Talsec AppSec Conf in Prague. Adam Žilla spoke about Red Teaming and Marek Mlynček led a hands‑on workshop on hacking Android apps. Read the recap!

How we did "not" get rich from a scam

August 25, 2025

We present the story of our mission, which revealed how scammers in Slovakia and Europe use psychology, social engineering, and technology to defraud people.

Penetration Testing: A Comprehensive Guide to Your Cybersecurity

July 30, 2025

Discover what penetration testing is, why it's essential for your cybersecurity, and how Haxoris helps protect your systems from attacks. A complete guide for laymen, cybersecurity managers, and CISOs, including insights on the new Slovak Cyber Law (NIS2).

LLM security in commercial applications

July 2, 2025

Is your AI chatbot truly secure? Attacks like prompt injection can reveal sensitive data and manipulate its behavior. Read how to protect LLM applications. Attackers often only need a single, cleverly formulated sentence to break through protective barriers and force the model to ignore its original rules. We offer practical recommendations and insights into specialized tests that reveal weaknesses before someone else can exploit them.

Red Teaming Case Study: Uncovering Hidden Risks

May 15, 2025

Learn how Haxoris Red Teaming revealed real vulnerabilities through simulated attacks. A practical case study on improving security resilience.

Penetration Test: The Key to a Successful Cybersecurity Audit

May 8, 2025

A penetration test is the key that transforms a formal cybersecurity audit into real assurance. Discover why auditors rely on trusted results from Haxoris and how we help you identify and fix weaknesses before they turn into costly incidents.

Using Generative AI Models to Support Cybersecurity Analysts

December 30, 2024

My research explored how AI-powered LLMs can assist in vulnerability detection and security log analysis. While AI improves efficiency, it also introduces challenges like false positives and cost concerns. The key takeaway is that AI should enhance, not replace, human expertise in cybersecurity.

Presenting OWASP Methodology at Slovak Technical University

March 4, 2025

Explore OWASP methodologies and web security vulnerabilities in PHP applications, presented at Slovak Technical University by Andrej Šebeň.

About Ethical Hacking With Andrej Šebeň - Podcast

August 21, 2024

Ethical hacking can also be fun! Witty and engaging discussions about CVEs, banking security, and real-world cybersecurity stories in the Buzzworld podcast.

How To Hack Legally - Podcast

August 1, 2024

Discover how ethical hackers legally test systems and stop cyber threats. Listen to Haxoris’ podcast on ethical hacking, security, and responsible hacking.

Protect your business with a professional penetration test - uncover weaknesses before an attacker does.

Book Now