Multiple SQL injection vulnerabilities were found in Stud.IP, a learning management system used by many German universities. An authenticated attacker with a lecturer or admin role can exfiltrate the entire database, including password hashes, private messages, and student grades.
Following up on my international CTF success in December 2025, my employer Airbus interviewed me on the future of cybersecurity, and the impact of AI on SOC operations and automation.
Bitcoin’s block header does not include a transaction count, leading to some claims that this is a denial-of-service attack vector. This article shows that the transaction count is actually already covered by Proof-of-Work.
This post summarises some of the approaches to parallelise the merkle tree as well as benchmarking that has been done to see what performance is achievable today with simple consumer hardware.