kozhevniko - DEV Community

kozhevniko

Oct 26

10,146 Cockpit title matches and 6,767 fingerprints: why the console with a 9.8 injection flaw looks smaller than it is

#zoomeye #exposure #cockpit #linux

4 min read

kozhevniko

Oct 26

Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances

#zoomeye #attacksurface #beyondtrust #vulnerabilitymanagement

4 min read

kozhevniko

Oct 26

CVE-2026-106931 Response Order: Export Evidence Before You Patch SiteGuard

#vulnerability #incidentresponse #webapplicationfirewall #patching

4 min read

kozhevniko

Oct 26

CVE-2026-102178: BGP Flowspec Re-Advertisement Pushes a Stack Overflow Into the Junos Routing Engine

#cybersecurity #infosec #networking #security

4 min read

kozhevniko

Oct 26

Reducing NSD exposure before the upgrade: interim mitigations for the 4.15.3 CVEs

#dns #nsd #vulnerability #cve2026101338

4 min read

kozhevniko

Oct 26

SeBackupPrivilege reads any file and ignores the access control list, which is why backup software is a privilege-escalation target

#windows #privilegeescalation #hardening

4 min read

kozhevniko

Oct 25

AlwaysInstallElevated turns an MSI into an installer that runs as SYSTEM, and the setting lives in two registry keys

#windows #hardening #privilegeescalation

1

4 min read

kozhevniko

Oct 25

Argo CD: 62,236 fingerprints, but only 497 still answer on its documented port 8080

#zoomeye #exposuremeasurement #kubernetes #gitops

4 min read

kozhevniko

Oct 25

The AJP connector on 8009 is still listening, and it is not a web port

#tomcat #ajp #ghostcat #exposuremeasurement

4 min read

kozhevniko

Oct 25

Drupal's October 2026 Criticals and the Limits of "Just Update"

#drupal #remotecodeexecution #securityadvisory #vulnerability

3 min read

kozhevniko

Oct 25

Plex searchOne URL injection: chaining an unauthenticated entry point into plugin calls

#cybersecurity #infosec #security

2 min read

kozhevniko

Oct 25

PAN-OS October 2026 batch: how CVE-2026-0321 differs from its siblings

#panos #cve20260321 #certfr #triage

3 min read

kozhevniko

Oct 25

Exposure Is Not Impact: Writing a Defensible Danfoss Briefing

#security #zoomeye #reporting #ot

4 min read

kozhevniko

Oct 25

5,002 Unified CM fingerprints and a patch path that depends on which release you inherited

#zoomeye #ciscounifiedcm #voicesecurity #cve202676473

4 min read

kozhevniko

Oct 24

CVE-2026-74041 for defenders: what a config validation bypass teaches about control placement

#vulnerability #wazuh #cve202674041 #securitymonitoring

2 min read

kozhevniko

Oct 24

Zero Results for a CVSS 8.8 Bug: Reading the Argo CD CVE Dork That Returned Nothing

#zoomeye #argocd #exposuremeasurement #methodology

3 min read

kozhevniko

Oct 24

A request smuggling flaw on an ADC is a flaw in everything behind it

#security #vulnerabilitymanagement

4 min read

kozhevniko

Oct 24

The build server is the credential store, and it is answering on the internet

#security #attacksurfacemanagement

4 min read

kozhevniko

Oct 24

Grafana's SQL Expressions Reached DuckDB, and DuckDB Reaches the Filesystem

#grafana #cve20249264 #duckdb #sqlexpressions

3 min read

kozhevniko

Oct 24

Rejetto HFS signs its admin session cookie with Math.random()

#vulnerability #fileserver #prng #session

5 min read

kozhevniko

Oct 24

Velociraptor: 237 title matches, 15 certificate hits, and an endpoint agent you cannot see

#zoomeye #measurement #endpointsecurity

4 min read

kozhevniko

Oct 23

Detecting CVE-2026-96655 exploitation in Plex logs

#vulnerability #cve202696655 #plex #ssrf

1

3 min read

kozhevniko

Oct 23

The SIEM as an attack surface: FortiSIEM CVE-2026-106173 and the cron script behind it

#security #cybersecurityarticle

4 min read

kozhevniko

Oct 23

Zammad packages ran as root and executed files the service account could write

#security

4 min read

kozhevniko

Oct 23

Authelia returns 11,813 titles on a port that is not supposed to be public

#security

3 min read

kozhevniko

Oct 23

What PHP's CVSS 9.2 rating means for shared hosting after CVE-2026-109618

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

kozhevniko

Oct 23

Three VeloCloud Orchestrator bugs in one quarter: what CVE-2026-114625 says about the product's attack surface

#vulnerability #sdwan #arista #velocloud

3 min read

kozhevniko

Oct 23

Someone Else's Appliance: Third-Party Remote Support and the Visibility Gap

#zoomeye #thirdpartyrisk #beyondtrust #msp

4 min read

kozhevniko

Oct 23

Measuring self-managed GitLab exposure without counting the wrong thing

#security #zoomeyearticle

1

3 min read

kozhevniko

Oct 22

When You Cannot Patch VeloCloud Orchestrator Today: A CVE-2026-114625 Playbook

#mitigation #incidentresponse #networksecurity #velocloud

2 min read

kozhevniko

Oct 22

When the WAF is the entry point: SiteGuard CVE-2026-106931 and patching before forensics

#security #cybersecurityarticle

4 min read

kozhevniko

Oct 22

Turn Your Exposure List Into an Incident Response Drill

#fortinet #incidentresponse #tabletopexercise #zoomeye

3 min read

kozhevniko

Oct 22

CVE-2026-0313: Building Detection Coverage for the Cortex OS Query Command Injection

#vulnerability #cortexxsoar #cve20260313

4 min read

kozhevniko

Oct 22

Five Flaws, One Release: Why MariaDB Patch Priority Is Not a CVSS Sort

3 min read

kozhevniko

Oct 22

Hunting GlobalProtect Exposure After CVE-2026-0315: A macOS Endpoint Checklist

#detection #macos #threathunting #globalprotect

4 min read

kozhevniko

Oct 22

2,900 sign-in attempts a minute: what the ConnectWise campaign teaches about third-party application trust

#supplychain #connectwise #storm0940 #oauth

1

4 min read

kozhevniko

Oct 22

Timeline discipline for the OpenVPN 2.7.8 change

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

kozhevniko

Oct 21

Auditing an Estate You Inherited: Refrigeration Controllers Included

#ics #exposuremanagement

2 min read

kozhevniko

Oct 21

A Decision Brief on CVE-2026-102037 for Security Leadership

#security #juniper #junos #srx

2 min read

kozhevniko

Oct 21

When the Gateway Becomes the Foothold: CVE-2026-33792 and the Trust We Place in Firewalls

#juniper #srx #riskmanagement #cve202633792

3 min read

kozhevniko

Oct 21

Secrets in CI Variables: Rotation Discipline Beats Scanning

#cicd #secretsmanagement #cloudsecurity

5 min read

kozhevniko

Oct 20

Reading the CVE-2026-96951 record properly: what the vendor said and what it did not

#vulnerability #windows #cve202696951

3 min read

kozhevniko

Oct 20

CVE-2026-70024 and the Economics of an Emergency Patch

#cybersecurity #infosec #security

3 min read

kozhevniko

Oct 20

The Purdue Model as a Segmentation Contract, Not a Diagram

#otsecurity #ics #networksegmentation #iec62443

3 min read

kozhevniko

Oct 19

CVE-2026-85880: the ALPC sandbox escape explains why patch scores mislead

#microsoft #windows #alpc #elevationofprivilege

2 min read

kozhevniko

Oct 19

The MOVEit Transfer Threat Model Has Not Changed: Reading the 2026 Batch Against 2023

#vulnerability #moveittransfer #cve202689069 #operations

3 min read

kozhevniko

Oct 19

CVE-2026-89076 and the Reporting Endpoint Problem in File Transfer Platforms

#vulnerability #moveittransfer #filetransfer #patchmanagement

2 min read

kozhevniko

Oct 19

735,408 RabbitMQ Fingerprints: The Message Broker That Sits Between Everything

#zoomeye #messagebroker #attacksurface

1

4 min read

kozhevniko

Oct 18

The Legacy Branch Problem in the ModSecurity September 2026 Batch

#security #modsecurity #waf #vulnerability

2 min read

kozhevniko

Oct 18

VMSA-2026-0007: two escapes from a VMware guest, and no configuration that stops them

#security #vulnerability #virtualization #vmware

3 min read

kozhevniko

Oct 18

Low-Code LLM Builders Deserve a Security Review, Not Just a Prototype Label

#security #ai #exposure #zoomeye

2 min read

kozhevniko

Oct 18

The New Attack Surface Has an API: Measuring Exposed AI Infrastructure

#aisecurity #attacksurface #zoomeye #exposuremanagement

3 min read

kozhevniko

Oct 17

Supply Chain Consequences of a MOVEit Authentication Bypass

#security #vulnerability #moveit #cve202689068

2 min read

kozhevniko

Oct 17

Egress Filtering: The Control That Makes Exfiltration Expensive

#security #network #detection

2 min read

kozhevniko

Oct 17

SonicWall SMA exposure: what a CVSS 10.0 on a remote access appliance costs

#zoomeye #exposuremanagement

3 min read

kozhevniko

Oct 16

Server Administration Panels in Search Results: A Measured View

#exposure #serveradministration #hardening

3 min read

kozhevniko

Oct 16

From Snapshot to Baseline: Making Today's Counts Useful Tomorrow

#security #wordpress #clickfix #zoomeye

3 min read

kozhevniko

Oct 16

CVE-2026-76280: Splunk Enterprise Flaws That Upgrading Alone Does Not Fix

#splunk #configuration #patching #operations

2 min read

kozhevniko

Oct 16

Reading a KEV batch: turning seven exploited vulnerabilities into a 72-hour action list

#vulnerabilitymanagement #cisakev #triage

3 min read

kozhevniko

Oct 16

CVE-2026-76266 questions answered for Splunk administrators

#security #vulnerability #splunk #cve202676266

2 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with kozhevniko?