Insights - Nubetia

Uncategorized

Share a Laravel (Herd) project with ngrok: a public link in minutes

February 5, 2026

Share a Laravel (Herd) project with ngrok: a public link in minutes If you’re running your Laravel project on macOS with Laravel Herd (for example example.test) and you want to show it to a remote Project Manager (PM), ngrok is one of the fastest ways to create a temporary public link so they can access your local site from anywhere. In this guide, you’ll: Install ngrok on Mac. Configure your ngrok authtoken. Create a public link for a Herd-served site. Fix Herd’s common “Site not found” error (Host header). See “traditional” ngrok commands (no Herd) to expose a local port. [...]

DevOps

How to Calculate the Size of an S3 Folder Using AWS CLI

February 5, 2026

How to Calculate the Size of an S3 Folder Using AWS CLI Calculating the size of an S3 folder is a common task when working with Amazon Web Services. In this tutorial, you will learn how to calculate the size of an S3 folder using AWS CLI, getting the total size in gigabytes directly from the terminal. This method is ideal for developers, DevOps engineers, and technical teams who need to audit storage usage, optimize costs, or analyze S3 buckets. Requirements to Calculate S3 Folder Size AWS CLI installed AWS credentials configured using aws configure Permission to list objects in [...]

DevOps

How to switch AWS CLI user/account (profiles) and fix “AccessDenied” in ECR

February 4, 2026

How to switch AWS CLI user/account (profiles) and fix “AccessDenied” in ECR If you use AWS CLI with multiple accounts (for example, a personal account and a project account), it’s common for your terminal to “stick” to the wrong user/account. The typical symptom: commands like ECR login or S3 listing return AccessDenied, even though you “know” you have permissions. In this tutorial you’ll learn how to confirm which identity you’re using, how to find your correct profile (e.g., example), and how to force AWS CLI to use it in your current terminal session. Why does this happen? AWS CLI decides [...]

DevOps Software

Deploying Django on AWS (ECS Fargate + ECR + ALB + CloudFront + EventBridge) — Step-by-step Guide

January 31, 2026

Cybersecurity - Insights Cybersecurity - News News News - Insights

Akira Ransomware Continues Exploiting SonicWall Vulnerability Using Legitimate Tools

September 29, 2025

Security researchers warn that the Akira ransomware group is still actively exploiting a year-old SonicWall vulnerability (CVE-2024-40766) for initial access, while relying on pre-installed and legitimate tools to evade detection. This vulnerability, a critical access control flaw with a CVSS score of 9.3, was patched in August 2024, yet Akira continues to target systems that remain unpatched. Over the past three months, Akira attacks have focused on SSL VPN accounts using one-time passwords (OTP) for multi-factor authentication (MFA). According to Arctic Wolf, dozens of incidents show common indicators such as VPN logins from VPS hosting providers, network scanning, Impacket SMB [...]

Cybersecurity - Insights Cybersecurity - News News News - Insights

Microsoft Thwarts AI-Generated Phishing Campaign Targeting US Organizations

September 29, 2025

Microsoft Threat Intelligence recently intercepted a sophisticated phishing campaign that appears to have leveraged AI-generated code to avoid detection. The attack targeted organizations in the United States and attempted to hide its malicious payload inside an SVG file disguised as a PDF. On August 18, attackers used a compromised small business email account to distribute phishing messages. The emails were self-addressed, with actual targets hidden in the Bcc field, and mimicked file-sharing notifications. The attached file, named “23mb – PDF- 6 pages.svg,” contained embedded scripts that redirected recipients to a fake CAPTCHA page, likely leading to a fraudulent login form. [...]

Cybersecurity - Insights Cybersecurity - News News News - Insights

How AI is Transforming Cyberattacks According to Wiz CTO Ami Luttwak

September 29, 2025

Ami Luttwak, chief technologist at cybersecurity firm Wiz, recently shared insights with TechCrunch on how artificial intelligence (AI) is reshaping the cybersecurity landscape. “Cybersecurity is ultimately a mind game,” Luttwak explained. “Whenever a new technology emerges, it presents attackers with new opportunities.” As businesses rapidly integrate AI into workflows—through vibe coding, AI agents, or other tools—the overall attack surface expands. While AI helps developers deliver code faster, this speed often introduces mistakes and insecure shortcuts, which can be exploited by attackers. Wiz, acquired by Google earlier this year for $32 billion, observed that many AI-assisted applications show insecure authentication implementations. [...]

Cybersecurity - Insights Cybersecurity - News News News - Insights

First Malicious MCP Server Exposed in Rogue Postmark-MCP Package

September 29, 2025

Cybersecurity researchers have identified the first-ever case of a malicious Model Context Protocol (MCP) server discovered in the wild, highlighting the growing risks to the software supply chain. According to Koi Security, a threat actor introduced rogue functionality into an npm package named “postmark-mcp”, which mimicked the legitimate Postmark Labs library of the same name. The malicious code first appeared in version 1.0.16, released on September 17, 2025. The authentic Postmark-MCP library, available on GitHub, is designed to expose an MCP server that allows users to send emails, manage templates, and track campaigns with AI assistants. However, the compromised npm [...]