Saturday, November 7, 2026
Author

John McHacker

featured posts

Best Practices

Credential Stuffing: When Stolen Passwords Become Your Login Problem

by Trolling Alan
InfoSec

I Replaced Zero Trust with Total Trust in Me. Tremendous Security.

by Dump Tonald
Best Practices

Post-Quantum Migration: Start with a Cryptographic Inventory

by Brainstein Albert

Latest From Category

Best PracticesInfoSecNews

FortiSandbox Authentication Bypass: Protect the Management Plane First

by John McHacker

FortiSandbox authentication bypass puts the management plane in focus. Restrict access, verify the advisory, patch safely, and review administrative activity.

Best PracticesInfoSecNews

Plex2Shell: Patch Plex Media Server and Check for Compromise

by John McHacker

Plex2Shell attacks require more than a version check. Patch Plex Media Server, assess exposed hosts, and verify the recovery boundary.

InfoSecNews
Chrome 154 Follow-Up: Reconciling Two Rapid Security Releases
by John McHacker

How to update compliance baselines after Chrome 154 received 32 security fixes and then …

InfoSecMalware & Threats
Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: Patch Every Gateway Node
by John McHacker

An emergency fleet-wide update guide for exploited NetScaler RCE vulnerabilities, including fixed builds, HA …

Best PracticesInfoSec
Apache Tomcat September Security Release: Upgrade Reverse Proxy and WebSocket Paths
by John McHacker

A deployment and hardening guide for the September Tomcat releases covering HTTP/2, AJP, WebSocket, …

InfoSecMalware & Threats
F5 BIG-IP APM CVE-2026-94127: Patch OAuth Authorization Servers and Hunt
by John McHacker

A practical response plan for exposed BIG-IP APM OAuth authorization servers: confirm scope, patch …

Load More Posts

latest blog posts

Best PracticesInfoSecMalware & Threats

Credential Stuffing: When Stolen Passwords Become Your Login Problem

by Trolling Alan

Credential stuffing reuses stolen username-password pairs. Detect account takeover, enforce MFA, protect recovery, and measure defenses across login paths.

InfoSecTechnology Trends

I Replaced Zero Trust with Total Trust in Me. Tremendous Security.

by Dump Tonald

Tonald Dump appoints himself the root of trust, signs his own audit, and discovers that a gold certificate still …

Best PracticesInfoSecTechnology Trends

Post-Quantum Migration: Start with a Cryptographic Inventory

by Brainstein Albert

Post-quantum migration starts with knowing where cryptography is used. Build an inventory, prioritize long-lived data, and test vendor migration …

Best PracticesInfoSecNews

eMudhra Certificate Distrust: Check the Java Runtime Your Service Actually Uses

by Gill Bates

eMudhra certificate distrust requires checking the running Java service, its actual truststore, embedded runtimes, and container images.

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept