INTRODUCCIÓN

Welcome to this new Medium post, in this one I’ll show you how to identify a driver vulnerability that allows reading and writing arbitrary…

An interview-focused and exam-focused guide to CIA, IAM, NIST CSF, Security Controls, SOC, Incident Response, and DevSecOps.

Machine Information

TL;DR AMD has disclosed CVE-2026-43598, an AMD RCCL vulnerability rated 7.7 on CVSS 4.0. The flaw sits in the ROCm Communication Collectives Library and could let a compromised peer run code remot…

For tool-using AI systems, data credibility, instruction authority, and permission to act are three different decisions.

Platform: TryHackMe
Machine: Publisher
Focus: Web Enumeration, SPIP, AppArmor, SUID, Linux Privilege Escalation

It’s 1 a.m. You’ve been poking at a box for two hours, you finally land a foothold, and you’re thrilled. Then you close the laptop, because…

1. Ringkasan Eksekutif (Executive Summary / TL;DR)

TL;DR The Document Foundation has fixed six flaws in LibreOffice, led by CVE-2026-63277, a LibreOffice Calc vulnerability that runs attacker code when a user opens a spreadsheet. Researchers have …

OpenAI has unveiled its approach to text watermarking in response to the EU AI Act. The company will add an invisible signal to eligible ChatGPT and Codex output in the European Union. Meanwhile, …

TL;DR Atlassian has patched CVE-2026-21589, a critical Atlassian Data Center vulnerability with a CVSS score of 9.3. The arbitrary file access bug lets an unauthenticated attacker read files from …

TL;DR A Twenty CRM vulnerability, CVE-2026-105763, let any workspace member read other members’ IMAP, SMTP and CalDAV passwords in plaintext. The flaw scores 9.6 on CVSS and needs only the d…

At a Glance Organization Trump Mobile (access allegedly gained via partner Liberty Mobile) Data exposed Names, emails, phone numbers, home addresses and order details People affected 3,615 custome…

TL;DR IBM has published a security bulletin covering 25 Langflow vulnerabilities in Langflow OSS versions 1.0.0 through 1.12.2. Two flaws, CVE-2026-104334 and CVE-2026-93674, score 9.8 on CVSS 3.1…

TL;DR The Apache Thrift project has fixed 61 Apache Thrift vulnerabilities in version 0.25.0, published on October 2, 2026. Two flaws are rated critical at CVSS 9.2, 49 are high and 10 are medium.…

Introduction

When auditing web applications, some of the most critical vulnerabilities stem not from complex zero-days or memory corruption, but from…

Platform: TryHackMe Room: https://tryhackme.com/room/brr Difficulty: Easy Tags: OT, SCADA, Web, RCE, Modbus Date: 2026–10–06

Overview

The delicate interplay of competition and cooperation between Apple and Google within the search engine and browser markets has become exceedingly precarious. This is happening amidst mounting glo…