Cybersecurity Category

Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.

09/04/2026

Government Rails Site Hit Hours After CVE Patch

Rietta patched a government client running a Ruby on Rails website within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.

Read More »

08/18/2026

Generate OpenSSL Elliptic Curve Key Pair from the Command Line

How to generate an OpenSSL elliptic curve (P-256) key pair from the command line, and why NIST-backed ECC beats scaling RSA past 3072-bit.

Read More »

08/15/2026

22 Years on Firefox, and Today I'm Finally All In

Going all in with Mozilla Firefox as a cybersecurity professional in 2026 and keeping my workstation and iOS devices in sync.

Read More »

07/28/2026

Threat Modeling for ADA/WCAG Compliance

A systematic, evidence-based approach to ADA Title II and WCAG document audits, using threat modeling and risk scoring to treat accessibility as a governance concern.

Read More »

07/25/2026

The Five Pillars of Information Security (And Why We Audit Accessibility)

The Five Pillars of Information Security, why accessibility failures are availability failures, and the reason a cybersecurity firm audits ADA/WCAG compliance.

Read More »

04/16/2025

The Imminent Funding Lapse of the CVE Database: A Cybersecurity Crisis

Breaking news: The CVE database faced a funding lapse, crucial for tracking cyber threats. However, CISA has extended its contract, ensuring continued security coordination for the moment. The long-term impact remains uncertain.

Read More »

04/04/2025

Understanding Signal Messaging App Security: Is Encryption Enough?

Signal security explained: Learn how end-to-end encryption works, threat models, and why security is more than just encryption. Understand Signal's strengths & limits.

Read More »

05/14/2024

UUID as a secure API token for API RESTful endpoints? (Video)

Video excerpt about the role of UUIDs as a security identifier for REST API and how to use them more securely if you must.

Read More »

11/28/2023

An Honest Conversation About Cyber Security (Video)

I recently sat down with Jeremy Duvall of 7Factor Software to discuss Cyber Security and application developers. Enjoy this video!

Read More »

09/27/2023

Prioritizing cybersecurity (Pluralsight)

The structure and siloing of a large enterprise organization can thwart security efforts. Here is a tip on how to overcome.

Read More »