PAN-OS Critical RCE CVE-2026-0300 Patched
CVE-2026-0300 PAN-OS User-ID CVSS 9.8 RCE patched, CVE-2026-42945 NGINX 18-year heap overflow surfaces, G7 publishes first AI SBOM guidance for vendors.
Posts
Salt Typhoon: CALEA Backdoor Abuse & Telecom Breach Explained
In late 2024, Verizon, AT&T, and T-Mobile all admitted the same thing: their lawful-intercept systems - the ones they build for law enforcement - had been c
The SE's Toolkit: Scripts, Templates, and Resources I Use Every Week
A practical resource collection for cybersecurity Solutions Engineers - discovery call templates, proposal outlines, CLI cheat sheets, useful scripts, and deal …
AI Security Engineer: Salary, Skills & Attack Surface Guide
$450K. The job didn't exist 24 months ago. Every Fortune 500 is hiring. Episode three of TechUpdates Special Series. AI bug bounties have crossed six figures fo
How to Stay Current on Cybersecurity When You're in Meetings All Day
A practical system for SEs and AMs to stay current on cybersecurity news, threats, and trends - 15-minute routines, curated sources, podcasts, and knowledge …
Microsoft AI Finds 16 Windows Zero-Days
CVE-2026-33827 and CVE-2026-33824 AI-discovered CVSS 9.8 Windows kernel RCEs patched. Shai-Hulud npm worm spreads. Foxconn confirms factory cyberattack.
First AI-Generated Zero-Day - CVE-2026-41940
Google TAG confirms first AI-crafted zero-day exploiting CVE-2026-41940 in cPanel, Shai-Hulud npm/PyPI worm, Cl0p sat in UK water utility for 730 days.
From Account Manager to Solutions Engineer: Making the Technical Pivot
A practical 6-month transition plan for Account Managers moving into Solutions Engineer roles - skills gap analysis, certifications, study resources, and …
ITDR on Cisco ISE: Behavioral Identity Scoring with AWS Serverless
Closing the ITDR gap in Cisco ISE - a closed-loop AWS serverless architecture for behavioral identity scoring with pxGrid in, CoA out, under $50/month.
The TACACS+ Lockout That Taught Me Three Things About IOS-XE AAA
How I locked myself out of a Cisco router with TACACS+, why IOS-XE does not fall through on STATUS_FAIL, and the safe AAA chain pattern that fixes it.