DEV Community

#infosec

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
DORA TLPT for Security Engineers: From Attack Paths to Operational Resilience

DORA TLPT for Security Engineers: From Attack Paths to Operational Resilience

Comments
2 min read
CVE-2026-107823: How a Crafted Username Becomes MariaDB Security Metadata

CVE-2026-107823: How a Crafted Username Becomes MariaDB Security Metadata

Comments
3 min read
MariaDB's FILE Privilege Is a Filesystem Primitive: CVE-2026-107814 and CVE-2026-107818

MariaDB's FILE Privilege Is a Filesystem Primitive: CVE-2026-107814 and CVE-2026-107818

Comments
3 min read
From Point-in-Time to Always-On: Preparing Your NIST 800-171 Evidence for Whatever CMMC Becomes

From Point-in-Time to Always-On: Preparing Your NIST 800-171 Evidence for Whatever CMMC Becomes

Comments
2 min read
The SSP and POA&M Aren't New: Lessons From Four Generations of DoD Security Rules

The SSP and POA&M Aren't New: Lessons From Four Generations of DoD Security Rules

Comments
2 min read
How the four Plex CVEs relate: three request flaws and one path to code execution

How the four Plex CVEs relate: three request flaws and one path to code execution

Comments
2 min read
Running Plex at home: what CVE-2026-96652 changes about remote access and account hygiene

Running Plex at home: what CVE-2026-96652 changes about remote access and account hygiene

Comments
2 min read
CVE-2026-102175: A Pre-Authentication Heap Overflow in Junos sdxd Puts Root Code Execution Behind a Service-Deployment Link

CVE-2026-102175: A Pre-Authentication Heap Overflow in Junos sdxd Puts Root Code Execution Behind a Service-Deployment Link

1
Comments
4 min read
If Passwords Are Hashed, How Do Hackers Still Crack Them?

If Passwords Are Hashed, How Do Hackers Still Crack Them?

1
Comments
6 min read
PHP2Shell: Two Critical PHP Runtime Flaws Give Unauthenticated Attackers Code Execution

PHP2Shell: Two Critical PHP Runtime Flaws Give Unauthenticated Attackers Code Execution

Comments
5 min read
Hướng dẫn khắc phục lỗ hổng CVE-2026-109618 và CVE-2026-109619 trên PHP

Hướng dẫn khắc phục lỗ hổng CVE-2026-109618 và CVE-2026-109619 trên PHP

Comments
12 min read
PHP2Shell: Turning a Session Upload-Progress UAF into Unauthenticated RCE (CVE-2026-109618 / CVE-2026-109619)

PHP2Shell: Turning a Session Upload-Progress UAF into Unauthenticated RCE (CVE-2026-109618 / CVE-2026-109619)

Comments
4 min read
Node2Shell: Memory Corruption RCE in Brotli Affecting Node.js

Node2Shell: Memory Corruption RCE in Brotli Affecting Node.js

1
Comments
4 min read
ClickFix Crew Weaponizes Signed Siemens Software Center Binary to Sideload RAT (CVE-2026-110936)

ClickFix Crew Weaponizes Signed Siemens Software Center Binary to Sideload RAT (CVE-2026-110936)

Comments
5 min read
Evidence-first security testing: why we refuse to ship unverified scanner output

Evidence-first security testing: why we refuse to ship unverified scanner output

Comments
1 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.