SonicWall Firewall Bypass Flaws — Emergency Patches
SonicWall NGFW bypass flaws get emergency patches, FBI warns of $725M cargo theft via broker hacks, two IR pros sentenced for running BlackCat ransomware.
Posts
SSL Stripping: Downgrading HTTPS to HTTP Without the User Noticing
How SSL stripping intercepts HTTPS traffic via HTTP rewrites, where HSTS and HSTS preloading defend against it, and what sslstrip still bypasses in 2026.
CVE-2026-41940 cPanel Auth Bypass Exploited
CVE-2026-41940 cPanel CVSS 10.0 auth bypass exploited since February with public PoC, SAP npm supply-chain backdoor, Linux Copy Fail kernel root flaw.
IoT Botnet: Your Smart Cameras Are DDoSing Someone Right Now
Deep dive into Mirai botnet anatomy: scanner logic, default credential brute-force, C2 architecture, the Dyn DDoS attack, detection with Zeek and iptables, and …
Network Segmentation Pitch: From VLANs to Microsegmentation to TrustSec
The SE's guide to pitching network segmentation maturity — from flat networks through VLANs, ACLs, microsegmentation, and TrustSec SGTs — with objection …
npm Supply Chain Attack: 47K Apps Compromised
In February, a maintainer of a widely-used npm package pushed a release that shipped malware to 47,000 downstream applications. The maintainer's GitHub account
CISA Mandates Patch for Windows Shell CVE-2026-32202
CVE-2026-32202 Windows Shell zero-day confirmed exploited, CVE-2026-3854 GitHub RCE exposes private repos, CVE-2026-42208 LiteLLM SQLi hit in 36 hours.
CISO Salary, Liability & The SEC Subpoena Risk
$1.4M comp. SEC subpoena. Same job. Welcome to TechUpdates Special Series — four episodes on the cybersecurity roles people actually want to hear about. We star
Running a Proof of Concept for Cisco ISE: Timeline, Scope, and Gotchas
Plan and execute a 30-day Cisco ISE POC with this complete guide. 4-week timeline, scoping checklist, common gotchas, success criteria, and results presentation …
VLAN Hopping: Jumping Between Network Segments You Shouldn't Access
Technical breakdown of VLAN hopping via switch spoofing and double tagging, with Scapy exploit code, Cisco IOS hardening configs, and PCI DSS segmentation …