Cisco SEG Zero-Day RCE: Unauthenticated Root Execution in Active Campaigns
Originally published on satyamrastogi.com Cisco patches critical zero-day in Secure Email Gateway enabling unauthenticated remote attackers to execu…
DevOps
⚑ Report a ProblemLatest DevOps news from Tech News
Danfoss Refrigeration RCE: OT Sabotage via Supply Chain Compromise
Originally published on satyamrastogi.com French supermarket chains targeted via Danfoss controller compromise. Remote defrost attack exploited unpa…
The Ultimate IDOR Testing Checklist (2026 Edition)
Ultimate IDOR Testing Checklist Phase 1: Setup & Target Identification [ ] Create Test Accounts: Create two accounts (Attacker and Victim) for s…
AI Agent Security Audit: From MCP Penetration Testing to LLM Vulnerability Assessment
AI Agent Security Audit: From MCP Penetration Testing to LLM Vulnerability Assessment The rapid adoption of AI agents and MCP (Model Context Protoco…
OT Isolation as Attack Surface: Weaponizing CISA's Defense Guidance
Originally published on satyamrastogi.com CISA's new OT isolation guidance reveals defensive assumptions attackers exploit. Improperly segmented net…
Hunting the #1 API Vulnerability (BOLA) in Your Own REST API
Your scanner gave you a green checkmark. Your API is still leaking every user's data. That is the uncomfortable truth about the most common API flaw…
JetBrains Marketplace Supply Chain Attack: 15 Malicious AI Plugins & API Key Exfiltration
Originally published on satyamrastogi.com Security researchers identified 15 malicious JetBrains plugins masquerading as DeepSeek AI assistants. Att…
HackTheBox. Прохождение Mini Pro Lab Puppet
Вам поручено провести проверку на проникновение в компанию Puppet Inc . Компания не разрешает передачу данных за пределы внутренней сети, поэтому вн…