The cyber security knowledge center.

Practical content from industry professionals on digital forensics · data recovery · cyber security · KVKK compliance.

All Posts

542 posts

#machine identities#non-human identity#NHI

Machine Identities (NHI) and AI Agent Identity Security

Machine identities (service accounts, API keys, AI agents) outnumber human accounts and most go unmonitored. Their difference from human identity and protecting AI agent identities.

DSET Mühendislik Ekibi·28 Eylül 2026·4 min read·86 views

#MLSecOps#machine learning security#ML pipeline

What Is MLSecOps? Machine Learning Pipeline Security

MLSecOps embeds security into every phase of the ML lifecycle. ML pipeline phases and risks, practices and the difference from DevSecOps.

DSET Mühendislik Ekibi·28 Eylül 2026·4 min read·96 views

#adversarial ML#adversarial examples#evasion attack

Adversarial ML: Adversarial Examples and Evasion Attacks

Adversarial ML misleads models with crafted inputs. Evasion happens at inference, differing from data poisoning. How it works and defense.

DSET Mühendislik Ekibi·28 Eylül 2026·4 min read·159 views

#OWASP ML Top 10#machine learning security#ML attacks

OWASP Machine Learning Security Top 10: ML Attacks

The OWASP ML Security Top 10 lists the most critical risks to machine learning systems. Its difference from the LLM Top 10, key risks and mitigation.

DSET Mühendislik Ekibi·28 Eylül 2026·4 min read·93 views

#AI TRiSM#AI governance#AI risk management

What Is AI TRiSM? AI Trust, Risk and Security Management

AI TRiSM is a framework to operate AI in a trustworthy, explainable and secure way. Its four pillars, difference from classic AI risk management and the NIST/ISO/EU AI Act link.

DSET Mühendislik Ekibi·28 Eylül 2026·4 min read·71 views

#MITRE ATLAS#AI security#AI threat matrix

What Is MITRE ATLAS? The AI Threat Matrix and the ATT&CK Difference

MITRE ATLAS is a knowledge base of attack tactics and techniques against AI systems. Its difference from ATT&CK, its tactics and AI threat modeling.

DSET Mühendislik Ekibi·28 Eylül 2026·4 min read·98 views

#password spraying#brute force#credential stuffing

Password Spraying Attack and Defense

Password spraying tries one common password across many accounts, avoiding lockout. Difference from brute force and credential stuffing, why it works and MFA defense.

DSET Mühendislik Ekibi·25 Eylül 2026·4 min read·162 views

#LLMNR#NBT-NS#NTLM relay

LLMNR/NBT-NS Poisoning and NTLM Relay: Internal Network Attack and Defense

LLMNR/NBT-NS poisoning captures NTLM hashes on Windows internal networks and turns into access via NTLM relay. How it works, why it is common and defense.

DSET Mühendislik Ekibi·25 Eylül 2026·4 min read·185 views

#metasploit#exploit#payload

What Is the Metasploit Framework and How Is It Used?

Metasploit is the platform that proves the exploitability of a found vulnerability. Exploit, payload, Meterpreter concepts and defense against being exploited.

DSET Mühendislik Ekibi·25 Eylül 2026·4 min read·161 views

#burp suite#web penetration testing#OWASP

Burp Suite Guide: Web Application Penetration Testing

Burp Suite is the most common web pentest tool: proxy, Repeater, Intruder. Manual OWASP Top 10 testing, its components and defensive tips for developers.

DSET Mühendislik Ekibi·25 Eylül 2026·4 min read·414 views

#nmap#port scanning#network reconnaissance

Nmap Guide: Network Reconnaissance and Port Scanning

Nmap is the core tool of the reconnaissance phase: live systems, open ports, service and version detection. Scan types, NSE and defending against Nmap scanning.

DSET Mühendislik Ekibi·25 Eylül 2026·4 min read·174 views

#hotel fraud#fake reservation#BEC

Hotel Fraud: Protecting Against Fake Reservations, BEC and Phishing

Hotels are frequently hit by fake reservations, stolen cards, BEC and phishing aimed at guests. The most common scenarios, BEC defense and rules for staff.

DSET Mühendislik Ekibi·22 Eylül 2026·4 min read·105 views