TL;DR Cisco disclosed seven ClamAV vulnerabilities on August 7, 2026. Each lets an unauthenticated remote attacker crash the scanner with a crafted file. The result is a denial of service that sto…

Lately, I’ve been wanting to dive deeper into web vulnerabilities to truly understand how they arise in today’s modern web applications.

I break into things for a living, or at least for sport. Most of my security work points one direction: find the bug, prove it, write it…

So I aspire to be an application security engineer and one of the common terms you will ever hear in the industry is shift left.

Or: what happens when you stop hunting for bugs and start hunting for the bugs that actually matter

Dell patched multiple critical flaws in its Secure Connect Gateway on August 31, 2026. The most severe Dell Secure Connect Gateway vulnerability, CVE-2026-80172, scores a 9.8 CVSS. It lets an unau…

Cisco disclosed a high-severity security flaw in its Unified Computing System platform on September 9, 2026. This newly revealed Cisco Secure Boot bypass allows local attackers or administrators t…

Security researchers discovered a critical Secure Boot bypass vulnerability impacting multiple major hardware vendors today. This flaw exists within the Unified Extensible Firmware Interface (UEFI…

Modern businesses rarely depend on a single software application.

Mamí Christina is stirring the arroz with one hand and holding her nephew Reinaldo’s laptop with the other, and mija, the screen is doing…