Cybersecurity Category
Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.
Subscribe to Cybersecurity posts via RSS
10/20/2026
Built an App with AI? Get a Security Review Before Launch
by Frank Rietta
Non-developers now build working custom apps with AI assistants. A few hours of expert whiteboard review before launch can save a lot of grief later.
Read More: Built an App with AI? Get a Security Review Before Launch
09/16/2026
Non-Repudiation in Cybersecurity
by Frank Rietta
Non-repudiation is a foundational security property among the five pillars of Information Assurance. It is at natural odds with Privacy and must be balanced.
09/14/2026
RubyGems Open Source Supply Chain Security and OpenAI
by Frank Rietta
OpenAI agents attacked RubyGems in May 2026. Why automated attackers have collapsed the window to patch a critical CVE from weeks to hours.
Read More: RubyGems Open Source Supply Chain Security and OpenAI
09/04/2026
Government Rails Site Hit Hours After CVE Patch
by Frank Rietta
Rietta patched a government client's Ruby on Rails site within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.
08/18/2026
Generate OpenSSL Elliptic Curve Key Pair from the Command Line
by Frank Rietta
How to generate an OpenSSL elliptic curve (P-256) key pair from the command line, and why NIST-backed ECC beats scaling RSA past 3072-bit.
Read More: Generate OpenSSL Elliptic Curve Key Pair from the Command Line
08/15/2026
22 Years on Firefox, and Today I'm Finally All In
by Frank Rietta
Going all in with Mozilla Firefox as a cybersecurity professional in 2026 and keeping my workstation and iOS devices in sync.
Read More: 22 Years on Firefox, and Today I'm Finally All In
07/28/2026
Threat Modeling for ADA/WCAG Compliance
by Frank Rietta
An evidence-based approach to ADA Title II and WCAG document audits, using threat modeling and risk scoring to treat accessibility as a governance concern.
07/25/2026
The Five Pillars of Information Security (And Why We Audit Accessibility)
by Frank Rietta
The five pillars of information assurance: confidentiality, integrity, availability, authentication, and non-repudiation, and why accessibility is part of it.
Read More: The Five Pillars of Information Security (And Why We Audit Accessibility)
04/16/2025
The Imminent Funding Lapse of the CVE Database: A Cybersecurity Crisis
by Frank Rietta
Breaking news: the CVE program, crucial for tracking cyber threats, faced a funding lapse. CISA extended its contract for now; the long-term impact is unclear.
Read More: The Imminent Funding Lapse of the CVE Database: A Cybersecurity Crisis
04/04/2025
Understanding Signal Messaging App Security: Is Encryption Enough?
by Frank Rietta
Signal security explained: how end-to-end encryption works, threat models, and why security is more than encryption. Understand Signal's strengths & limits.
Read More: Understanding Signal Messaging App Security: Is Encryption Enough?