Cybersecurity Category
Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.
Subscribe to Cybersecurity posts via RSS
09/16/2026
Non-Repudiation in Cybersecurity
by Frank Rietta
Non-repudiation is a foundational security property among the five pillars of Information Assurance. It is at natural odds with Privacy and must be balanced.
09/14/2026
RubyGems Open Source Supply Chain Security and OpenAI
by Frank Rietta
OpenAI agents attacked RubyGems in May 2026. Why automated attackers have collapsed the window to patch a critical CVE from weeks to hours.
09/04/2026
Government Rails Site Hit Hours After CVE Patch
by Frank Rietta
Rietta patched a government client running a Ruby on Rails website within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.
08/18/2026
Generate OpenSSL Elliptic Curve Key Pair from the Command Line
by Frank Rietta
How to generate an OpenSSL elliptic curve (P-256) key pair from the command line, and why NIST-backed ECC beats scaling RSA past 3072-bit.
08/15/2026
22 Years on Firefox, and Today I'm Finally All In
by Frank Rietta
Going all in with Mozilla Firefox as a cybersecurity professional in 2026 and keeping my workstation and iOS devices in sync.
07/28/2026
Threat Modeling for ADA/WCAG Compliance
by Frank Rietta
A systematic, evidence-based approach to ADA Title II and WCAG document audits, using threat modeling and risk scoring to treat accessibility as a governance concern.
07/25/2026
The Five Pillars of Information Security (And Why We Audit Accessibility)
by Frank Rietta
The Five Pillars of Information Security, why accessibility failures are availability failures, and the reason a cybersecurity firm audits ADA/WCAG compliance.
04/16/2025
The Imminent Funding Lapse of the CVE Database: A Cybersecurity Crisis
by Frank Rietta
Breaking news: The CVE database faced a funding lapse, crucial for tracking cyber threats. However, CISA has extended its contract, ensuring continued security coordination for the moment. The long-term impact remains uncertain.
04/04/2025
Understanding Signal Messaging App Security: Is Encryption Enough?
by Frank Rietta
Signal security explained: Learn how end-to-end encryption works, threat models, and why security is more than just encryption. Understand Signal's strengths & limits.
05/14/2024
UUID as a secure API token for API RESTful endpoints? (Video)
by Frank Rietta
Video excerpt about the role of UUIDs as a security identifier for REST API and how to use them more securely if you must.