GitHub Breached via Malicious VS Code Extension
GitHub confirms 3,800 internal repos breached via trojanized VS Code extension, Verizon DBIR 2026 marks exploits top vector, CVE-2026-0264 PAN-OS DNS RCE.
Posts
OT/ICS Security: Defending Critical Infrastructure from Volt Typhoon
$140K. When you mess up, the lights go out for real. Final episode of TechUpdates Special Series. The most consequential security job almost nobody talks about
CISA Contractor Leaked AWS GovCloud Keys
CISA contractor exposed AWS GovCloud secrets on GitHub, Exchange zero-day CVE-2026-42897 actively exploited, Storm-2949 malware-free Azure cloud breach.
CVE-2026-32202 & CVE-2026-41940: Vulnerability Analysis for CySA+ Study
Analyze CVE-2026-32202 (CVSS 4.3) and CVE-2026-41940 (CVSS 10.0) for CySA+ CS0-003: KEV, EPSS, MITRE ATT&CK, and risk-based triage.
NGINX Heap Overflow CVE-2026-42945 Exploited
CVE-2026-42945 NGINX heap overflow exploited 48 hours after disclosure, MiniPlasma Windows kernel zero-day PoC public, ShinyHunters hits 7-Eleven.
Cisco SD-WAN Zero-Day CVE-2026-20182 Exploited
CVE-2026-20182 Cisco SD-WAN CVSS 10 auth bypass exploited, Exchange CVE-2026-42897 XSS-to-RCE active, NGINX RCE patched, Shai-Hulud worm open-sourced.
MFA Fatigue Attacks: Palo Alto Unit 42 Analysis for Security+ Students
Sec+ SY0-701 study guide on MFA fatigue: Palo Alto Unit 42 analysis, Lapsus$ and Scattered Spider tradecraft, MITRE T1621, detection, defenses.
PAN-OS Critical RCE CVE-2026-0300 Patched
CVE-2026-0300 PAN-OS User-ID CVSS 9.8 RCE patched, CVE-2026-42945 NGINX 18-year heap overflow surfaces, G7 publishes first AI SBOM guidance for vendors.
Salt Typhoon: CALEA Backdoor Abuse & Telecom Breach Explained
In late 2024, Verizon, AT&T, and T-Mobile all admitted the same thing: their lawful-intercept systems - the ones they build for law enforcement - had been c
The SE's Toolkit: Scripts, Templates, and Resources I Use Every Week
A practical resource collection for cybersecurity Solutions Engineers - discovery call templates, proposal outlines, CLI cheat sheets, useful scripts, and deal …