Disk Imaging in Forensics: dd vs FTK Imager vs Autopsy
Forensic disk imaging compared - dd, FTK Imager, and Autopsy. When to use each, write-blocker requirements, hash verification, and court-admissible output.
Posts
Cisco ISE BYOD Onboarding Guide - Self-Service Without Tickets
Complete Cisco ISE BYOD onboarding guide - dual-SSID flow, internal CA, native supplicant provisioning, MyDevices portal, and lifecycle management.
PAN-OS IKEv2 and DNS Proxy RCEs - CVE-2026-0263
CVE-2026-0263 and CVE-2026-0264 deliver RCE in PAN-OS VPN and DNS processing. FortiClient EMS CVE-2026-35616 exploited in the wild.
Carnival Breach - ShinyHunters Steal 5.9M Records
ShinyHunters breach Carnival for 5.9M records. Google unifies Mandiant, Wiz, and Gemini. JINX-0164 deploys macOS backdoors against crypto firms.
Cisco ISE TACACS+ Device Admin Guide - Done Safely
Complete Cisco ISE TACACS+ device admin guide - Device Admin persona, shell profiles, command sets, AD integration, and the safe AAA chain pattern.
Auditing a Cisco ISE Deployment Without Touching It
Read-only Cisco ISE audit tool - 52 ERS / OpenAPI endpoints, 9 findings, 21 recommendations, HTML + PDF report in 30 seconds. Open source on GitHub.
Cisco ISE Profiling: Device Fingerprinting Configuration Guide
How Cisco ISE Profiling classifies every endpoint automatically - probes, policy hierarchy, Certainty Factor, configuration walkthrough, and the gotchas.
FBI Warns Silent Ransom Group Walking Into Law Firms
FBI flash alert on Silent Ransom Group USB attacks at law firms. LA Metro attributed to Iranian APT. SymJack weaponizes AI coding agents. CVE-2026-45659.
CISA Mandates 48-Hour Drupal Patch - Active SQLi
CISA orders 48-hour Drupal patching for active SQLi exploitation, Dutch police seize 800 bulletproof hosting servers, Iran APT hits aviation sector.
Megalodon Poisons 5,500+ GitHub Repos
Megalodon injects malicious workflows into 5,500+ GitHub repos, CVE-2026-26980 Ghost CMS zero-day exploited, TrapDoor plants 34 packages on npm and PyPI.