How a protected dev site became publicly accessible because authentication existed only at the CDN edge.

Lab Information

Attackers have begun exploiting a critical vulnerability in macOS’s built-in Screen Sharing feature to gain access to Mac computers without any valid credentials whatsoever. In several confi…

Part 9 of our Android security series. Part 8 covered Credential Manager — getting the user signed in. This post covers what happens for…

TL;DR Citrix patched a critical NetScaler authentication bypass tracked as CVE-2026-19490. It scores 9.3 on CVSS v4. A second flaw, CVE-2026-19489, can cause denial of service. Why it matters NetS…

IBM patched 18 flaws in Db2 Mirror for i this week. The worst bug lets a remote attacker run system commands without logging in. IBM Db2 Mirror RCE risk reaches a CVSS score of 9.9. Also, several …

TL;DR Cisco released hardening updates for Secure Workload on August 19, 2026. The Cisco Secure Workload authentication bypass and privilege escalation flaws include two vulnerabilities rated CVSS…

1. Introduction

TL;DR FreeRDP 3.31.0 patches five server-role flaws reported by Bynario, plus 17 other issues. Researchers chained three of them into pre-authentication remote code execution. This FreeRDP vulnera…

Corporate email can fall into an attacker’s hands after the compromise of a single low-privilege account. Nearly 22,000 internet-facing Microsoft Exchange servers have not received the fix f…