Saturday, November 7, 2026
Author

John McHacker

featured posts

Best Practices

Credential Stuffing: When Stolen Passwords Become Your Login Problem

by Trolling Alan
InfoSec

I Replaced Zero Trust with Total Trust in Me. Tremendous Security.

by Dump Tonald
Best Practices

Post-Quantum Migration: Start with a Cryptographic Inventory

by Brainstein Albert

Latest From Category

Best PracticesInfoSecNews

Binance Crypto Theft: Why the DevOps Workstation Is Part of the Security Boundary

by John McHacker

Binance’s preliminary findings link a compromised DevOps laptop to unauthorized withdrawals. Examine access boundaries without assuming the full attack chain.

Best PracticesInfoSecNews

Cisco ASA/FTD: Patch the VPN Without Weakening Authentication

by John McHacker

Cisco ASA/FTD CVE-2026-76418 affects a reachable VPN authentication path. Check the configuration, patch safely, and preserve strong access controls.

Best PracticesInfoSecNews
FortiSandbox Authentication Bypass: Protect the Management Plane First
by John McHacker

FortiSandbox authentication bypass puts the management plane in focus. Restrict access, verify the advisory, …

Best PracticesInfoSecNews
Plex2Shell: Patch Plex Media Server and Check for Compromise
by John McHacker

Plex2Shell attacks require more than a version check. Patch Plex Media Server, assess exposed …

InfoSecNews
Firefox ESR 153.5: Prioritize Sandbox and Update-Service Fixes
by John McHacker

Firefox ESR 153.5 fixes a large set of high-impact flaws, including sandbox escapes, privilege …

Best PracticesInfoSec
Windows October 2026 Update: Test NTLM and RDP Before Broad Rollout
by John McHacker

A deployment guide for KB5127648: validate the new NTLMv1 default, test RDP with Administrator …

Load More Posts

latest blog posts

Best PracticesInfoSecMalware & Threats

Credential Stuffing: When Stolen Passwords Become Your Login Problem

by Trolling Alan

Credential stuffing reuses stolen username-password pairs. Detect account takeover, enforce MFA, protect recovery, and measure defenses across login paths.

InfoSecTechnology Trends

I Replaced Zero Trust with Total Trust in Me. Tremendous Security.

by Dump Tonald

Tonald Dump appoints himself the root of trust, signs his own audit, and discovers that a gold certificate still …

Best PracticesInfoSecTechnology Trends

Post-Quantum Migration: Start with a Cryptographic Inventory

by Brainstein Albert

Post-quantum migration starts with knowing where cryptography is used. Build an inventory, prioritize long-lived data, and test vendor migration …

Best PracticesInfoSecNews

eMudhra Certificate Distrust: Check the Java Runtime Your Service Actually Uses

by Gill Bates

eMudhra certificate distrust requires checking the running Java service, its actual truststore, embedded runtimes, and container images.

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept