OpenAI’s DevDay security scanner finds, validates, and proposes patches. For a small SaaS team, the hard part is what you enable before the…

Looks like you have a fetish for being hacked.

As part of my Red Teaming learning journey, I explored DNS tunneling and how DNS traffic can potentially be abused to move information…

Introduction

The Common Weakness Enumeration (CWE™) Program is celebrating 20 years as a public, community-developed effort to help the cybersecurity…

Should Your Business Pay Ethical Hackers to Find Security Problems?

TL;DR Developers disclosed six Apache WSS4J vulnerabilities. These critical security defects include authentication bypasses and denial of service flaws. Administrators must update their libraries…

TL;DR On September 30, 2026, the Python Software Foundation disclosed two security flaws in CPython. These critical Python SSL vulnerabilities allow memory corruption and bypass certificate hostna…

TL;DR CISA published advisory ICSA-26-272-07 on September 29, 2026, covering two flaws in the Viidure dashcam app for Android. The worst, CVE-2026-96587, scores a maximum CVSS 10.0 for hardcoded c…

TL;DR CVE-2026-88772 is a pre-authentication memory overflow in Citrix NetScaler ADC and Gateway. Attackers exploited it in the wild as a zero-day, and CISA added it to its Known Exploited Vulnera…

Today’s Brief:

At 2:07 AM, someone typed the wrong password. Most people would ignore it. A SOC analyst can't.

Machine details

Un ejercicio práctico de infección controlada, análisis de comportamiento y saneamiento sin formateo, realizado como proyecto de…

TL;DR ASUS recently disclosed three high-severity hardware and firmware flaws. These ASUS security vulnerabilities impact multiple router models and popular motherboards. Users must apply availabl…

TL;DR Attackers are exploiting a MediaWiki RCE flaw tracked as CVE-2026-100382. This CVSS 10 unauthenticated RCE sits in the popular External Data extension. Details and a proof-of-concept are pub…

TL;DR Project maintainers released patches to address four ModSecurity security vulnerabilities. Specifically, these bugs cause uninitialized pointer dereferences, response body inspection bypasse…

TL;DR Axios released updates to patch ten Axios security vulnerabilities. Specifically, these bugs include prototype pollution and denial-of-service risks. Therefore, you should update to version …

TL;DR Dell published an advisory covering four Dell Terraform Provider vulnerabilities. The most critical flaw disables TLS certificate validation in Redfish providers, exposing management traffic…

TL;DR Kiteworks disclosed 78 security flaws across its Core platform, Email Protection Gateway, and forms products. Nine of these Kiteworks vulnerabilities rate Critical, led by a 9.8 password res…