Actively exploited this week: 9 new CISA KEV entries (12 October to 18 October 2026)
Every week CISA adds vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalogue. The bar for getting on that list is not "severe on pape…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
- игры
AI
News
Tech
agents
ai
api
architecture
automation
backend
beginners
career
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool
Imagine logging into your banking application, then visiting a malicious website in another browser tab. Without your knowledge, that website trigge…
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons
Original research by the Hacktron AI team (Harsh Jaiswal, Mohan Pedhapati, Rahul Maini) — read the full writeup here: https://www.hacktron.ai/blog/h…
CVE-2026-55420 for Regulated Environments: Evidence, Deadlines and Audit Trails
CVE-2026-55420 for Regulated Environments: Evidence, Deadlines and Audit Trails The compliance view of a forum vulnerability In a regulated organisa…
What Is BYOVD? How Can a Signed Driver Give Malware Kernel-Level Access?
In July 2022, a ransomware actor walked into a corporate network, found a system with endpoint protection properly configured, and disabled it. Not…
Why Engineering Laptops Are Becoming the Biggest Cybersecurity Risk in Industrial Facilities
Why Engineering Laptops Are Becoming the Biggest Cybersecurity Risk in Industrial Facilities An in-depth analysis of engineering workstation securit…
What Is DNS Tunneling? How Can Hackers Hide Data Inside DNS Queries?
Every time a browser visits a website, a DNS query leaves the machine. The query contains a domain name. That name resolves to an address. The conne…
Splunk Patched an Unauthenticated RCE in Its Own SIEM — Here's What You Need to Know
An unauthenticated attacker with network access to a Splunk search head cluster member can execute arbitrary OS commands. No credentials. No interac…
Cisco Dropped 18 CVEs Yesterday — Here's What Actually Needs Your Attention
Seven critical CVEs across two product lines. None exploited yet. No workarounds exist. Here's the fast triage. NX-OS NGOAM — 3 × CVSS 9.8 Unauthent…
Advanced Privacy: A Practical Defense-in-Depth Guide
Privacy is not a product you install. It is a system of boundaries that prevents one disclosure from becoming a complete map of your life. No setup…
Horse Museum is safe, here's why.
Horse Museum installer is not malware. It is a false positive triggered by aggressive DRM-bypass techniques. To play on a private server without per…
The SOC 2 Question Philippine BPOs Cannot Treat as Only a Security Question
A Philippine BPO can have strong operations, competitive pricing, experienced teams, and international customers. Yet one question can still appear…
Network Forensics: Evidence Acquisition (Week 4)
This week, we fovus on the phase of evidence acquisition, focusing on how investigators capture network traffic using physical interception, acquisi…
OpenCTI Case Creation Flaw CVE-2026-76822: A Permission Model Postmortem
OpenCTI Case Creation Flaw CVE-2026-76822: A Permission Model Postmortem Vulnerability overview CVE-2026-76822 is a moderate authorization flaw in O…
Free DISA STIG checklists, sorted by product
A FortiGate goes in at the edge, an OpenShift 4.12 cluster comes up, and each ticket says to apply the STIG. DISA writes a separate Security Technic…
Nobody Owns These Cameras: The Security Problem Hiding on America's Public Roads
Last month, a county employee in Florida walked a stretch of public road and counted fourteen cameras that nobody had authorized. Three belonged to…
The Invisible Killer of Cybersecurity: Why Even the Best Tools Collapse Against Human Fatigue
We’ve spent the last decade pouring money into shiny security stacks. SIEM platforms that ingest terabytes of logs. EDR agents that watch every proc…
Network segmentation decides whether CVE-2026-7273 in Zyxel GS1900 switches is reachable
Network segmentation decides whether CVE-2026-7273 in Zyxel GS1900 switches is reachable CVE-2026-7273 is a stack-based buffer overflow in the CGI p…
OpenCTI Case Queue Integrity: Reading CVE-2026-76822 as a Data Provenance Problem
OpenCTI Case Queue Integrity: Reading CVE-2026-76822 as a Data Provenance Problem Vulnerability overview CVE-2026-76822 is a moderate authorization…
CVE-2026-26084: the sandbox appliance that answers questions it should refuse
CVE-2026-26084: the sandbox appliance that answers questions it should refuse Information disclosure is easy to deprioritize next to remote code exe…
Beyond CVSS: A Risk-Based Approach to Vulnerability Prioritization
Your vulnerability scanner shows: CVE-XXXX-XXXX CVSS: 9.8 Severity: Critical The natural reaction is: "This is critical. Put it at the top of the re…
What Is ASLR? How Does Randomizing Memory Addresses Stop Exploitation?
What if the memory address an attacker needs today isn't the same address tomorrow? That question is the core idea behind Address Space Layout Rando…
HTB - Forest
I’m planning to take the TCM Security PJPT certification exam next Monday. I’ve finished going through the PEH course, and I wanted to spend some ti…
What an attacker gains from CVE-2026-7273 on a Zyxel GS1900 switch
What an attacker gains from CVE-2026-7273 on a Zyxel GS1900 switch CVE-2026-7273 lets an unauthenticated attacker on the local network run OS comman…
Fake LastPass Authenticator Installs a Microsoft-Signed Driver That Kills 145 Security Tools
TL;DR what: A fake LastPass Authenticator installer on GitHub side-loads a malicious DLL, escalates to SYSTEM, and installs a Microsoft-signed kerne…
Sandboxing Firefox with Firejail: a no-trace browser that can't read my files or reach my LAN
Sandboxing Firefox with Firejail: a no-trace browser that can't read my files or reach my LAN Context I wanted one Firefox profile for "dirty" brows…
Measuring internet-exposed RDP surface and what it means for defenders
The Visibility of Remote Desktop Protocols in the Global Attack Surface The Remote Desktop Protocol (RDP) stands as one of the most ubiquitous and h…
ShinyHunters Rooted Clop's Leak Site Through Grav CMS, and Now Wants to Extort the Extortionists
TL;DR what: ShinyHunters compromised and defaced the Clop ransomware gang's dark web data leak site on Friday, September 19, 2026, using an unauthen…
Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments
You have a Linux server. It is running an enterprise operating system. The operating system is still under vendor support. Your vulnerability scanne…
The Anatomy of an IP Ban: TCP Fingerprints, Passive OS Fingerprinting, and MTU Signatures
The Anatomy of an IP Ban: TCP Fingerprints, Passive OS Fingerprinting, and MTU Signatures Core Problem Statement & Invalidation of Traditional A…