DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
One Batch, Six Bugs: Placing CVE-2026-103552 Among the Apache LDAP API Fixes

One Batch, Six Bugs: Placing CVE-2026-103552 Among the Apache LDAP API Fixes

Comments
2 min read
Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis

Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis

Comments
7 min read
I masked the tokens in my own logs. The mask found two hosts serving the same one.

I masked the tokens in my own logs. The mask found two hosts serving the same one.

Comments
5 min read
Eight CA private keys were integers under 256. I recovered all eight in 11 milliseconds.

Eight CA private keys were integers under 256. I recovered all eight in 11 milliseconds.

1
Comments
6 min read
CVE-2026-76461: SQL Injection in an Email Gateway, Root on the Appliance

CVE-2026-76461: SQL Injection in an Email Gateway, Root on the Appliance

Comments
3 min read
Rank Math PRO Update Channel Hijacked: 11-Hour Window Delivered a Self-Restoring WordPress Backdoor

Rank Math PRO Update Channel Hijacked: 11-Hour Window Delivered a Self-Restoring WordPress Backdoor

Comments
5 min read
Browser Cookies: What Are They, How Are They Used, and How Can They Be Stolen?

Browser Cookies: What Are They, How Are They Used, and How Can They Be Stolen?

5
Comments
19 min read
Show Your Work: Logster and Detection That Explains Its Alerts and Its Silences

Show Your Work: Logster and Detection That Explains Its Alerts and Its Silences

Comments
6 min read
China-Nexus Armory Castle Exploited BeyondTrust Remote Support Zero-Day CVE-2026-102764 for Seven Weeks Before Disclosure

China-Nexus Armory Castle Exploited BeyondTrust Remote Support Zero-Day CVE-2026-102764 for Seven Weeks Before Disclosure

Comments
5 min read
The quietest backdoor runs on your own GPU

The quietest backdoor runs on your own GPU

7
Comments
5 min read
OWASP Continuous Security

OWASP Continuous Security

Comments
4 min read
Actively exploited this week: 9 new CISA KEV entries (12 October to 18 October 2026)

Actively exploited this week: 9 new CISA KEV entries (12 October to 18 October 2026)

Comments
3 min read
Reading the MOVEit Transfer Disclosure Correctly: What the CVE Records Confirm

Reading the MOVEit Transfer Disclosure Correctly: What the CVE Records Confirm

Comments
3 min read
No Prompt Required: CVE-2026-55330 and a Use-After-Free in Android's Bluetooth Stack

No Prompt Required: CVE-2026-55330 and a Use-After-Free in Android's Bluetooth Stack

Comments
2 min read
Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool

Cross-Site Request Forgery (CSRF): When a Trusted Browser Becomes an Attack Tool

1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.