Building an Incident Response Playbook from Zero
A practical template for writing an incident response playbook from scratch — what to include, how to map it to NIST 800-61, roles and RACI, comms templates, …
Posts
Cisco SD-WAN Zero-Day CVE-2026-20245 — Exploited, No Patch
CVE-2026-20245 gives root on Cisco SD-WAN with no patch available. Plus IronWorm hits 36 npm packages and Five Eyes warns on Chinese recruiter ops.
Malware Triage in 5 Minutes — A First-Responder Checklist
A first-responder malware triage checklist — what to do in the first 5 minutes of finding a suspicious binary. Static-vs-dynamic decision tree, hashing, …
Cisco Unified CM PoC Exploit — Critical Root Access Flaw
Cisco Unified CM critical flaw with public PoC exploit code. Plus CISA warns on fuel tank ATG attacks and Miasma npm supply chain compromise hits 32 packag.
The NIST 800-61 Incident Response Lifecycle — Plain English
NIST SP 800-61 Rev. 2 explained in plain English — the four-phase incident response lifecycle, what each phase actually means in practice, and the mistakes that …
HTTP/2 Bomb DoS Hits Every Major Web Server Stack
HTTP/2 Bomb DoS exploits default configs on NGINX, Apache, IIS, and Envoy. Plus Acer Wave 7 CVSS 10.0 zero-days and a VS Code GitHub token stealer.
Memory Forensics with Volatility 3 — A Practical First Walkthrough
Memory forensics with Volatility 3 — capture, profile selection, pslist, malfind, netscan, hivelist, and a 30-minute first-investigation walkthrough.
EXIF Metadata in Digital Forensics: How Hidden Image Data Cracks Cases
EXIF metadata for forensic examiners — GPS coordinates, camera serial, software signature, real-case examples, and how attackers strip it.
Windows Netlogon RCE CVE-2026-41089 Exploited
CVE-2026-41089 Windows Netlogon RCE exploited in the wild. Oracle WebLogic CVE-2024-21182 active. Red Hat npm supply chain attack hits 32 packages.
PAN-OS Auth Bypass CVE-2026-0257 Exploited in the Wild
CVE-2026-0257 PAN-OS auth bypass exploited 4 days post-disclosure. Microsoft MFA outage blocks enrollments. 19-year Linux kernel root flaw goes public.