Security & Privacy
Posts in the Security & Privacy category from the LionScripts team.

How to Secure WooCommerce Plugins Against Site Takeover Attacks
WooCommerce powers over 6 million stores, making it a prime target for attackers. Learn how to secure your plugins and prevent the vulnerabilities that lead to site takeover attacks.

How to Safely Migrate Passwords and Passkeys Between Managers
Switching password managers exposes your entire digital life at once. Learn how to safely migrate passwords and passkeys between managers without leaving sensitive data at risk.

How to Vet an Open-Source Tool for Supply Chain Risks Before Installing
Running npm install can hand strangers access to your build server and users. Learn how to vet open-source tools for supply chain risks before you install anything.

How to Detect New Tab Hijacker Extensions Before They Take Over
New tab hijacker extensions swap your search page for ad-laden portals that harvest your queries. Learn how to spot the warning signs and remove them before they take over your browser.

How to Verify a Cloud Backup Service's Security Before You Trust It
Your backups are only as trustworthy as the company holding them. Learn how to verify a cloud backup service's security with practical checks before you upload your most sensitive data.

How to Safely Migrate Passwords and Passkeys Between Managers
Migrating passwords was once a simple CSV export. But passkeys, backed by FIDO's no-plaintext-export rule, complicate the move between 1Password, Bitwarden, and Apple Passwords. Here's how to switch safely.
How to Vet a Chrome VPN Extension Before You Trust It
A Chrome VPN extension sees every URL you visit and can alter the sites you use. Learn how to vet one properly before trusting it with your browsing data.

How to Fuzz Test WordPress Plugins for Vulnerabilities Before Use
A star rating won't reveal how a WordPress plugin handles unexpected input. Learn how to fuzz test plugins for hidden vulnerabilities before you install them on a live site.

How to Verify Open-Source Software Before You Install It
Open-source software powers the modern internet, but blindly installing it is risky. Learn how to verify packages, check signatures, and avoid supply-chain attacks.

How to Vet AI HR Agents Before Letting Them Touch Employee Data
AI HR agents want deep access to sensitive employee data like SSNs, salaries, and medical notes. Learn how to vet these tools before they touch your HRIS.

How to Migrate Passkeys Between Password Managers on Android
Passkeys are easy to set up but notoriously hard to move. Learn how to migrate passkeys between password managers like Google, 1Password, and Bitwarden on Android.

How to Vet Voice-Controlled AI Assistants Before Granting Access
Voice AI assistants hear everything—from grocery lists to work calls. Learn how to vet these always-listening devices for privacy and security before granting access.