Topic
21 posts tagged “Cybersecurity”.
Chisato · · 5 min read Vulnerability scanning automatically finds known weaknesses; penetration testing has a human actively try to exploit them. When to use each.
Chisato · · 6 min read Attackers are exploiting CVE-2026-82329, a CVSS 9.8 auth bypass in self-hosted JFrog Artifactory, to mint admin tokens. Affected versions, fixes, mitigations.
Kurumi · · 6 min read Dell and Palo Alto Networks both report after the close on September 1. Consensus estimates, the AI hardware vs cybersecurity debate, and what to watch.
Chisato · · 5 min read PaperCut is patching two zero-days in NG and MF — a pre-auth RCE and an access-control flaw — exploited in the wild. All versions affected. Apply Release 2.
Chisato · · 4 min read CVSS scores a vulnerability's severity from 0 to 10 using exploitability and impact metrics. How the score is built, read, and misapplied.
Chisato · · 4 min read Privilege escalation is when an attacker gains higher-level access than they were granted — vertically to admin rights, or horizontally to a peer account.
Chisato · · 4 min read Privileged access management controls, monitors, and time-limits who can use admin credentials, reducing the blast radius of a breach.
Chisato · · 4 min read A canary token is a fake credential or file that alerts you the moment it's touched — a trip wire for detecting breaches rather than preventing them.
Chisato · · 5 min read A SIEM collects logs from across an organization, correlates them, and alerts on suspicious patterns. How it works and what feeds it.
Chisato · · 7 min read North Korea's Lazarus group exploited a Windows AFD.sys zero-day (CVE-2026-68820) for five weeks to breach defense firms and deploy the FudModule rootkit.
Chisato · · 4 min read EDR continuously monitors laptops and servers for suspicious behavior, catching threats signature-based antivirus misses, and gives responders tools to act.
Chisato · · 4 min read A rootkit is malware that gains privileged access and then hides itself, and often other malware, from the operating system and security tools.
Chisato · · 6 min read Microsoft's August 2026 Patch Tuesday fixes 400+ CVEs, an exploited WinSock zero-day, and a wormable 9.8 Windows DNS Server RCE. What to patch first.
Chisato · · 4 min read A watering hole attack compromises a site its targets already trust, then waits for victims to visit — rather than phishing them directly.
Chisato · · 4 min read A honeypot is a decoy system built to look like a real target, luring attackers so defenders can observe their techniques and catch intrusions early.
Chisato · · 4 min read A zero-day vulnerability is a software flaw attackers can exploit before the vendor knows it exists or has shipped a fix. How zero-days are found and closed.
Chisato · · 5 min read CISA added SharePoint RCE CVE-2026-58644 (CVSS 9.8) to its KEV catalog after active exploitation. Affected versions, the patch, and what to do now.
Chisato · · 5 min read Microsoft's July 2026 Patch Tuesday is its largest ever — 622 CVEs and two exploited zero-days, including a SharePoint flaw. What to patch first.
Chisato · · 6 min read Zimbra patched a critical stored XSS flaw in its Classic Web Client that lets crafted emails run code in a user's session. Update to 10.1.19 now.
Chisato · · 5 min read CVE-2026-10134 is a CVSS 10.0 unauthenticated RCE in Langflow OSS 1.0.0–1.9.3. How the public-flow exploit works, who's exposed, and how to patch fast.
Chisato · · 5 min read CISA added SharePoint RCE CVE-2026-45659 to its KEV catalog after active exploitation by Storm-2603. Affected versions, the patch, and remediation steps.
