jeffrey - DEV Community

jeffrey

Oct 4

Detection engineering for CVE-2026-100382: hunting the External Data web shell

#security #vulnerability #detectionengineering #webshell

3 min read

jeffrey

Oct 4

Cisco ISE CVE-2026-76460: When the Policy Engine Becomes the Weakest Link

#cisco #ise #authenticationbypass #kev

4 min read

jeffrey

Oct 4

Request Smuggling in the ASGI Stack: Starlette and LiteLLM

#cybersecurity #infosec #python #security

3 min read

jeffrey

Oct 4

A patch plan for CVE-2026-88773 that accounts for FIPS, NDcPP and hybrid deployments

#vulnerability #citrix #netscaler #patching

2 min read

jeffrey

Oct 4

Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102

#security #vulnerability #checkpoint #vpn

3 min read

jeffrey

Oct 4

Detection and verification limits for CVE-2026-96364 on a live Drupal estate

#security #drupal #cve202696364 #contributedmodules

3 min read

jeffrey

Oct 3

Redis RCE identifiers in August 2026: a use-after-free and a fix that left work behind

#cybersecurity #database #infosec #security

3 min read

jeffrey

Oct 3

WordPress CVE-2026-87902: an Unauthenticated Path Traversal That Escalates into Remote Code Execution

#vulnerability #wordpress #pathtraversal #rce

3 min read

jeffrey

Oct 3

Patch Matrix for CVE-2026-86350: Which Apache Tomcat Builds Need 11.0.26, 10.1.60 or 9.0.122

#security #vulnerability #apachetomcat #cve202686350

2 min read

jeffrey

Oct 3

What the WordPress 4.7.0 to 7.1.1 file inclusion bug teaches about patch windows

#wordpress #patchmanagement #cve202687902 #websecurity

3 min read

jeffrey

Oct 3

The Five-Month Gap: Zimbra Exposure Between Zero-Day Exploitation and Public Disclosure

#zimbra #cve202566376 #exposuremanagement #zoomeye

3 min read

jeffrey

Oct 3

OpenMediaVault: 123,886 title matches beside four fingerprints

#zoomeye #storage #internetmeasurement #exposure

3 min read

jeffrey

Oct 2

Rundeck on 4,729 hosts: a job scheduler that holds the credentials to run them

#security #zoomeye #exposure #automation

3 min read

jeffrey

Oct 2

Why 14 BIND CVEs Landed at Once: Reading the September 2026 DNS Advisory

#dns #iscbind #vulnerability

3 min read

jeffrey

Oct 2

What Click2Shell Teaches About Reporting a Parser Discrepancy

#wordpress #click2shell #zoomeye #rce

2 min read

jeffrey

Oct 2

Shared and Managed Fortinet Estates: Whose Gateway Is It When Credentials Leak?

#security #fortinet #credentialexposure #zoomeye

6 min read

jeffrey

Oct 2

CVE-2026-96362: What the September 2026 Drupal Contributed Module Batch Means for Site Operators

#security #drupal #vulnerability #cve202696362

1

3 min read

jeffrey

Oct 2

1,160,264 Mosquitto fingerprints: the MQTT broker that ends up on the public internet

#mqtt #mosquitto #iot #exposure

2 min read

jeffrey

Oct 1

F5 BIG-IP management interfaces: 1.58 million fingerprint matches and 55,390 on 443

#loadbalancer #f5 #managementplane

1

2 min read

jeffrey

Oct 1

LXD Backup Import as an Attack Surface: CVE-2026-87799 and the btrfs Restore Path

#security #vulnerability #lxd #cve202687799

1

2 min read

jeffrey

Oct 1

Internet-Exposed Drupal Sites and the September 2026 Extension Advisory

#security #drupal #vulnerability

3 min read

jeffrey

Oct 1

Policy Drift on Application Delivery Controllers: The Setting Behind CVE-2026-88774

#security #citrix #netscaler #cve202688774

3 min read

jeffrey

Oct 1

1,890,595 MongoDB Service Matches: The Default-Configuration Problem at Internet Scale

#zoomeye #mongodb #exposure

1

2 min read

jeffrey

Oct 1

Browser extensions are an enterprise control problem, not a user hygiene problem

#browsersecurity #extensionmanagement #enterprisepolicy #supplychain

1

4 min read

jeffrey

Sep 30

DMARC aggregate reports as infrastructure change detection

#emailsecurity #dmarc #operations

1

2 min read

jeffrey

Sep 30

Joomla CVE-2026-48907 and CVE-2026-48908: Unauthenticated Upload in Two Extensions

#joomla #remotecodeexecution #cms #webshell

2 min read

jeffrey

Sep 30

Mapping CVE-2026-96361 to the Drupal Projects You Actually Run

#security #drupal #cve202696361 #inventory

1

2 min read

jeffrey

Sep 30

From Facebook Ad to Phone Bill: How the Android Toll Fraud Campaign Reached Victims

#android #tollfraud #malvertising #zoomeye

6 min read

jeffrey

Sep 30

CVE-2026-9586: One XML Field in Sangoma Switchvox Reaches the PostgreSQL Backend

#security #vulnerability #exploitedinthewild

3 min read

jeffrey

Sep 30

Windows Update Stack and ALPC: Two Exploited Local Privilege Escalation Flaws in the September 2026 Patch Tuesday

#patchmanagement #privilegeescalation #windows #exploitedinthewild

4 min read

jeffrey

Sep 29

15,307,587 on Port 5985 and 1,019,437 on Port 5986: Two Windows Remote Management Faces

#zoomeye #windows #winrm #remotemanagement

2 min read

jeffrey

Sep 29

Dagster: 1,712 Title Matches and a Zero Fingerprint

#zoomeye #dagster #dataorchestration #exposure

3 min read

jeffrey

Sep 29

OpenCTI Case Queue Integrity: Reading CVE-2026-76822 as a Data Provenance Problem

#cybersecurity #graphql #infosec #security

2 min read

jeffrey

Sep 29

Temporal at 1,992 Title Matches and 200 Application Fingerprints

#zoomeye #temporal #workfloworchestration #exposure

1

3 min read

jeffrey

Sep 29

2590 MongoDB, 1469 Memcached and 387 CouchDB Results: Three Data Stores With Three Default Postures

#zoomeye #datastores #mongodb #memcached

1

4 min read

jeffrey

Sep 29

Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route

#vulnerabilitymanagement #kestra #commandinjection #cve202649869

1

4 min read

jeffrey

Sep 28

HDFS Web Interfaces: 24,511 Fingerprint Matches and 1,602,200 Answers on Port 9870

#zoomeye #exposuremeasurement #hadoop #dataplatforms

1

3 min read

jeffrey

Sep 28

CVE-2026-89078: What the Advisory Says and What It Does Not

#vulnerability #gitlab #remotecodeexecution #cicd

2 min read

jeffrey

Sep 28

2,857,655 RouterOS Matches and 830,366 With SSH: Turning an Edge Device Baseline Into a Decision

#security #exposuremanagement #networksecurity

2

3 min read

jeffrey

Sep 28

CVE-2026-76442 and the Cost of an Unbounded Number in Cisco Secure Email Gateway

#security #vulnerability #cisco #cve202676442

1

3 min read

jeffrey

Sep 28

Public Exploit Code and No Patch: The D-Link DIR-822A L2TP Flaw in Context

#security #vulnerability #router #dlink

1

2 min read

jeffrey

Sep 28

Detecting and monitoring around CVE-2026-96360

#drupal #webform #cve202696360 #xss

1

2 min read

jeffrey

Sep 27

Replacing standing administrative access with brokered sessions

#privilegedaccess #zerotrust #administration

2 min read

jeffrey

Sep 27

Database Backups Are an Identity Problem Before They Are a Storage Problem

#backup #ransomware #identity

4 min read

jeffrey

Sep 27

Chosen Brick and HEAVYGRAM: Iranian Spyware That Reports Through Telegram

#iran #spyware #windows #threatintelligence

2 min read

jeffrey

Sep 27

CVE-2026-76441: Improper Access Control in Cisco Secure Email Gateway Exposes Restricted Functions

#security #vulnerability #cisco #accesscontrol

1

4 min read

jeffrey

Sep 27

Exploitation Conditions in CVE-2026-75682: What a Low-Privileged Account Buys an Attacker

#adobeconnect #cve202675682 #sqlinjection #detectionengineering

1

3 min read

jeffrey

Sep 26

CVE-2026-53266 Triage Guide: What the CISA KEV Listing Changes for Linux Kernel Patching

#security #linux #kernel #cve202653266

1

3 min read

jeffrey

Sep 26

RouterOS Administrative Takeover Without Credentials: A Defensive Reading of CVE-2026-86060

#vulnerability #routeros #mikrotik #ssh

1

2 min read

jeffrey

Sep 26

Palo Alto Networks at internet scale: 20,383 services, and 613 GlobalProtect portals

#cybersecurity #infosec #security

1

3 min read

jeffrey

Sep 26

Two XenForo Flaws in One Release: Empty OAuth2 Credentials and a Passkey That Belonged to Someone Else

#security #authentication #oauth #mfa

1

3 min read

jeffrey

Sep 26

Home and Small Business Storage on the Public Internet: Synology, QNAP and Plex

#zoomeye #synology #qnap #nas

3 min read

jeffrey

Sep 26

72,819 internet-reachable Samba servers: the file-sharing layer that never got an inventory

#zoomeye #samba #smb #filesharing

4 min read

jeffrey

Sep 25

JFrog Artifactory CVE-2026-82329: The Default Join Key as an Authentication Bypass

#cybersecurity #devops #security

1

3 min read

jeffrey

Sep 25

917,080 Hosts on Port 623: The Out-of-Band Controller Nobody Inventoried

#exposuremanagement #infrastructuresecurity

3 min read

jeffrey

Sep 25

5,102,346 Hosts on Port 5900: VNC and the Legacy Remote-Access Surface

#zoomeye #vnc #remoteaccess #exposure

2 min read

jeffrey

Sep 25

Artifact Repositories Are Trust Anchors: Incident Response for a Compromised Build Pipeline

#security #supplychain #incidentresponse #artifactory

3 min read

jeffrey

Sep 24

CVE-2026-93616: Why Check Point Management Servers Need Network-Level Protection

#cybersecurity #infosec #security

3 min read

jeffrey

Sep 24

Kubernetes Admission Control: From Pod Security Standards to Policy-as-Code Gates

#kubernetes #policy #admissioncontrol

2 min read

jeffrey

Sep 24

Apache Tomcat CVE-2026-77762: A Stale HPACK Emitter Leaks Trailers Between HTTP/2 Requests

#apachetomcat #cve202677762 #http2 #hpack

3 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with jeffrey?