Friday, November 6, 2026
Category:

Malware & Threats

featured posts

InfoSec

I Replaced Zero Trust with Total Trust in Me. Tremendous Security.

by Dump Tonald
Best Practices

Post-Quantum Migration: Start with a Cryptographic Inventory

by Brainstein Albert
Best Practices

eMudhra Certificate Distrust: Check the Java Runtime Your Service Actually Uses

by Gill Bates

Latest From Category

Best PracticesInfoSecMalware & Threats

Cross-Site Scripting (XSS): Prevention, Detection, and Incident Response

by Ada Hatelace

Cross-site scripting turns untrusted data into browser instructions. Prevent XSS with safe rendering, contextual encoding, sanitization, and tested controls.

Best PracticesInfoSecMalware & Threats

Password Spraying: How to Detect and Stop Low-and-Slow Login Attacks

by Trolling Alan

Password spraying spreads guesses across many accounts. Learn how to correlate login failures, reduce exposed authentication paths, and respond to compromise.

InfoSecMalware & Threats
NetScaler Compromise Assessment: Preserve Evidence, Hunt, and Re-Key
by Ada Hatelace

An incident-response guide for exploited NetScaler systems: preserve evidence, use Citrix IoC scanning carefully, …

InfoSecMalware & Threats
Citrix NetScaler CVE-2026-88771 and CVE-2026-88772: Patch Every Gateway Node
by John McHacker

An emergency fleet-wide update guide for exploited NetScaler RCE vulnerabilities, including fixed builds, HA …

InfoSecMalware & Threats
Check Point September KEVs: Validate LivePatch and Management Server Exposure
by Gill Bates

A remediation and evidence matrix for Check Point CVE-2026-85102 and CVE-2026-93616, including the LivePatch …

InfoSecMalware & Threats
Arista VeloCloud CVE-2026-93952: Contain and Rebuild the Orchestrator
by Ada Hatelace

How to contain an exposed on-premises VeloCloud Orchestrator, preserve evidence, search for Arista’s indicators, …

Load More Posts

latest blog posts

InfoSecTechnology Trends

I Replaced Zero Trust with Total Trust in Me. Tremendous Security.

by Dump Tonald

Tonald Dump appoints himself the root of trust, signs his own audit, and discovers that a gold certificate still …

Best PracticesInfoSecTechnology Trends

Post-Quantum Migration: Start with a Cryptographic Inventory

by Brainstein Albert

Post-quantum migration starts with knowing where cryptography is used. Build an inventory, prioritize long-lived data, and test vendor migration …

Best PracticesInfoSecNews

eMudhra Certificate Distrust: Check the Java Runtime Your Service Actually Uses

by Gill Bates

eMudhra certificate distrust requires checking the running Java service, its actual truststore, embedded runtimes, and container images.

Best PracticesInfoSecNews

Drupal Commerce Access Bypass: Patch the Store, Audit the Orders

by Ada Hatelace

Drupal Commerce access bypass requires a software update and an order audit. Check affected versions, reconcile payment records, and …

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept