Sunday, November 15, 2026
Tag:

CISA KEV

featured posts

Best Practices

Cryptojacking: Removing the Miner Is Only the First Step

by John McHacker
Best Practices

Credential Stuffing: When Stolen Passwords Become Your Login Problem

by Trolling Alan
InfoSec

I Replaced Zero Trust with Total Trust in Me. Tremendous Security.

by Dump Tonald

Latest From Category

InfoSecNews

Security Week in Review: October 3–9, 2026

by Melon Ask

Defender priorities for October 3–9: urgent FortiMail and NetScaler remediation, Cisco infrastructure verification, Android patch-level checks, and control-plane resilience planning.

Best PracticesInfoSec

After CISA’s Weekly Bulletin: Building a Risk-Based Vulnerability Queue

by Ada Hatelace

A practical vulnerability-prioritization model combining exploitation, reachability, business impact, controls, ownership, and remediation confidence.

InfoSecNews
Security Week in Review: September 26–October 2, 2026
by Melon Ask

Actively exploited NetScaler and Apple vulnerabilities lead the defender queue, followed by rapid Chrome …

InfoSecMalware & Threats
Check Point September KEVs: Validate LivePatch and Management Server Exposure
by Gill Bates

A remediation and evidence matrix for Check Point CVE-2026-85102 and CVE-2026-93616, including the LivePatch …

InfoSecMalware & Threats
Arista VeloCloud CVE-2026-93952: Contain and Rebuild the Orchestrator
by Ada Hatelace

How to contain an exposed on-premises VeloCloud Orchestrator, preserve evidence, search for Arista’s indicators, …

InfoSecMalware & Threats
F5 BIG-IP APM CVE-2026-94127: Patch OAuth Authorization Servers and Hunt
by John McHacker

A practical response plan for exposed BIG-IP APM OAuth authorization servers: confirm scope, patch …

Load More Posts

latest blog posts

Best PracticesInfoSecMalware & Threats

Cryptojacking: Removing the Miner Is Only the First Step

by John McHacker

Cryptojacking is a compromise to investigate, not just a busy CPU. Preserve evidence, find persistence, assess exposed secrets, and …

Best PracticesInfoSecMalware & Threats

Credential Stuffing: When Stolen Passwords Become Your Login Problem

by Trolling Alan

Credential stuffing reuses stolen username-password pairs. Detect account takeover, enforce MFA, protect recovery, and measure defenses across login paths.

InfoSecTechnology Trends

I Replaced Zero Trust with Total Trust in Me. Tremendous Security.

by Dump Tonald

Tonald Dump appoints himself the root of trust, signs his own audit, and discovers that a gold certificate still …

Best PracticesInfoSecTechnology Trends

Post-Quantum Migration: Start with a Cryptographic Inventory

by Brainstein Albert

Post-quantum migration starts with knowing where cryptography is used. Build an inventory, prioritize long-lived data, and test vendor migration …

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept