Essays and technical notes on cryptography, post-quantum migration and the security of AI systems.https://www.trashpanda-sec.pl/en-gbhttps://www.trashpanda-sec.pl/blog/zero-knowledge-proofs/https://www.trashpanda-sec.pl/blog/zero-knowledge-proofs/ZKPs let you convince a verifier that a statement is true while revealing zero information beyond that fact. Not an approximation, a strict mathematical guarantee. Here is how it actually works.Tue, 09 Jun 2026 00:00:00 GMTCryptographyZKPZero-Knowledgezk-SNARKsPrivacyResearchhttps://www.trashpanda-sec.pl/blog/agentic-ai-llm-security/https://www.trashpanda-sec.pl/blog/agentic-ai-llm-security/LLMs that browse the web, write code, and call APIs are a fundamentally different threat surface than chatbots. This post breaks down the attack classes unique to agentic systems and what defenders actually need to think about.Thu, 16 Apr 2026 00:00:00 GMTAI SecurityLLMAgentic AIPrompt InjectionRed TeamingSupply Chainhttps://www.trashpanda-sec.pl/blog/banking-cybersecurity-standards/https://www.trashpanda-sec.pl/blog/banking-cybersecurity-standards/A practitioner's guide to the major cybersecurity frameworks governing financial institutions - DORA in the EU, the FFIEC guidelines in the US, and the SWIFT Customer Security Programme worldwide.Tue, 24 Mar 2026 00:00:00 GMTBanking SecurityDORAFFIECSWIFTComplianceFinancial Serviceshttps://www.trashpanda-sec.pl/blog/pci-dss-deep-dive/https://www.trashpanda-sec.pl/blog/pci-dss-deep-dive/A practitioner's breakdown of PCI DSS v4.0 - its twelve requirements, the 2025 deadline for future-dated controls, and where organisations most commonly fall short.Tue, 17 Mar 2026 00:00:00 GMTPCI DSSCompliancePayment SecurityCryptographyPenetration Testinghttps://www.trashpanda-sec.pl/blog/quantum-computing-and-security/https://www.trashpanda-sec.pl/blog/quantum-computing-and-security/Quantum computers will break RSA-2048 and ECC-256 in hours once they're powerful enough. Here's what that means for the systems we secure today - and how to prepare before it's too late.Mon, 03 Nov 2025 00:00:00 GMTQuantumCryptographyPost-QuantumNISTPKIhttps://www.trashpanda-sec.pl/blog/azure-security-az500-threats/https://www.trashpanda-sec.pl/blog/azure-security-az500-threats/A practical look at the most dangerous attack vectors targeting Azure environments right now, mapped to the AZ-500 control domains - identity, network, data, and detection.Wed, 10 Sep 2025 00:00:00 GMTAzureAZ-500Cloud SecurityIdentitySIEMThreat Intelligencehttps://www.trashpanda-sec.pl/blog/cloud-computing-evolution/https://www.trashpanda-sec.pl/blog/cloud-computing-evolution/How cloud computing transformed from shared hosting on steroids into the distributed, multi-layered infrastructure that now runs critical national infrastructure - and what comes next.Tue, 22 Jul 2025 00:00:00 GMTCloudArchitectureAzureEdge ComputingHistoryhttps://www.trashpanda-sec.pl/blog/docker-security-best-practices/https://www.trashpanda-sec.pl/blog/docker-security-best-practices/From rootless containers and read-only filesystems to image scanning and Seccomp profiles - a practical checklist for production-grade Docker security.Mon, 20 Jan 2025 00:00:00 GMTDockerContainersDevSecOpsSecurityCloudhttps://www.trashpanda-sec.pl/blog/understanding-csp/https://www.trashpanda-sec.pl/blog/understanding-csp/A deep dive into Content Security Policy (CSP) - what it is, how to craft a strict policy, and how to audit it with browser DevTools and security scanners.Tue, 03 Dec 2024 00:00:00 GMTWeb SecurityCSPXSSHTTP HeadersOWASPhttps://www.trashpanda-sec.pl/blog/hardening-linux-server/https://www.trashpanda-sec.pl/blog/hardening-linux-server/A step-by-step guide to hardening a fresh Ubuntu/Debian server - from SSH lockdown and firewall rules to kernel parameter tuning and audit logging.Fri, 15 Nov 2024 00:00:00 GMTLinuxHardeningSSHUFWSecurity