QR Code Phishing (Quishing): That Parking Meter QR Code Is Malicious
How quishing attacks bypass email security scanners, harvest Microsoft 365 credentials, and exploit physical QR code placements — with detection and defense …
Posts
UAT-8302 China-Nexus APT Exposed by Cisco Talos
UAT-8302 APT targets governments with NetDraft and VSHELL, Cisco acquires Astrix Security for non-human identity, DigiCert revokes certs after breach.
Linux Kernel Zero-Day CVE-2026-31431 Exploited
CVE-2026-31431 Linux kernel zero-day hits CISA KEV with public PoC, 40,000 cPanel servers compromised in four days, Defender false-positives break TLS.
Prompt Injection: Making AI Do Things It Shouldn't
Direct and indirect prompt injection in LLM applications — real attack examples, vulnerable LangChain agent code, OWASP LLM01, MITRE ATLAS, detection, and …
Secure Remote Access Architecture: VPN vs ZTNA vs SASE
Architecture comparison of VPN, ZTNA, and SASE for secure remote access — with security posture analysis, cost modeling, migration paths, and a decision tree …
Deepfake CEO Fraud: The Voice on the Call Isn't Your Boss
How attackers use AI voice cloning and deepfake video to impersonate executives in BEC fraud — real incidents, attack chains, detection, and defense controls.
Incident Response Plan Template for Mid-Market Customers
Free incident response plan template for mid-market customers — NIST 6-phase lifecycle, roles matrix, communication plan, and escalation procedures.
ARP Poisoning: Intercepting Traffic on Your Own Network
Technical deep dive into ARP spoofing: how gratuitous ARP poisons caches, Scapy MitM scripts, Ettercap credential capture, DAI on Cisco Catalyst, and arpwatch …
Hybrid Cloud Security Architecture: What SEs Need to Know
A Solutions Engineer's guide to hybrid cloud security — shared responsibility models, identity federation, network security controls, and CSPM/CWPP/CNAPP …
Designing a Secure Campus Network: The SE's Reference Architecture
A complete reference architecture for secure campus networks — 3-tier design, ISE placement, firewall positioning, wireless security, and a 500-user bill of …