DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Golden ticket detection: the forged TGT that never touches the krbtgt password

Golden ticket detection: the forged TGT that never touches the krbtgt password

Comments
3 min read
Windows Attacks & DefenseWindows Attacks & Defense

Windows Attacks & DefenseWindows Attacks & Defense

Comments
86 min read
BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure

BAE Systems Incident Takes Down the Federal Bankruptcy Notice System: When the Contractor Is the Court's Single Point of Failure

Comments
5 min read
Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

Comments
2 min read
Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

Comments
3 min read
A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM

A Program Sent in a Chat Is Not Installed: Lessons From HEAVYGRAM

Comments
3 min read
Why Human Oversight Still Matters in Automated Cyber Defence Introduction

Why Human Oversight Still Matters in Automated Cyber Defence Introduction

Comments
6 min read
CVE-2026-93616: Assessing Real Exposure in Check Point Deployments

CVE-2026-93616: Assessing Real Exposure in Check Point Deployments

Comments
3 min read
phpIPAM: 4,238 title matches for the address register that maps a network

phpIPAM: 4,238 title matches for the address register that maps a network

Comments
2 min read
CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation

CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation

CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation

Comments
6 min read
What to answer when the questionnaire asks 'is MFA enforced for all users?'

What to answer when the questionnaire asks 'is MFA enforced for all users?'

Comments
2 min read
CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation

CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation

Comments
6 min read
No Laptop, No Lab: How Destawell's Founder Got on Google's Bug Hunters List

No Laptop, No Lab: How Destawell's Founder Got on Google's Bug Hunters List

Comments
1 min read
Understanding PDF Incremental Updates (%%EOF Chains): How Appended Byte Streams Leak Deleted Data

Understanding PDF Incremental Updates (%%EOF Chains): How Appended Byte Streams Leak Deleted Data

Comments
9 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.