Diego Diaz - DEV Community

Diego Diaz

Jul 21

ServiceNow CVE-2026-6875: Pre-Auth RCE in the AI Platform Powering 85% of Fortune 500

#cve20266875 #servicenow #rce #sandboxescape

1

4 min read

Diego Diaz

Jul 20

HollowGraph Malware Uses Microsoft 365 Calendar Events as Dead-Drop C2 Channel

#hollowgraph #microsoft365 #graphapi #c2

3 min read

Diego Diaz

Jul 20

Critical 7‑Zip XZ Buffer Overflow (CVE‑2026‑14266) Discovered and Patched

#7zip #cve202614266 #xzarchive #remotecodeexecution

3 min read

Diego Diaz

Jul 20

Critical NGINX Vulnerability CVE-2026-42533 Allows Remote Code Execution

#nginx #cve202642533 #security

2 min read

Diego Diaz

Jul 17

Telus Digital: ShinyHunters robó 1PB y exigió $65M

#breach #shinyhunters #cloudsecurity #thirdpartyrisk

4 min read

Diego Diaz

Jul 17

DarkSword: El Exploit que Hackeó tu iPhone sin que lo Supieras

#ios #apple #exploit #spyware

4 min read

Diego Diaz

Jul 16

Cisco FMC Zero-Day: 36 Días con Ransomware en tu Red

#ransomware #cisco #zeroday #cve202620131

4 min read

Diego Diaz

Jul 16

Breach Intuitive Surgical: Un Email Comprometió Datos Médicos

#phishing #breach #healthcare #ingenieriasocial

4 min read

Diego Diaz

Jul 16

Marquis: Cómo un Proveedor Fintech Expuso 672,000 Números de Seguro Social

#breach #fintech #ransomware #supplychain

5 min read

Diego Diaz

Jul 16

Foster City Declara Emergencia: Ransomware Paraliza Toda una Ciudad

#ransomware #gobierno #infraestructuracritica #respuestaincidentes

6 min read

Diego Diaz

Jul 16

Navia Benefit Solutions: 2.7 Millones de Registros de Salud Robados en Silencio

#breach #healthcare #supplychain #datossalud

6 min read

Diego Diaz

Jul 16

BlueLeaks 2.0: Hackers Exponen 8.3 Millones de Tips Anónimos a la Policía

#breach #lawenforcement #hacktivist #privacy

6 min read

Diego Diaz

Jul 16

LAPSUS$ Reclama el Hack de AstraZeneca: 3GB de Código Fuente y Claves Cloud

#breach #lapsus #pharma #extorsion

5 min read

Diego Diaz

Jul 16

Trivy Comprometido: La Herramienta que Escanea tus Vulnerabilidades Ahora Roba tus Credenciales

#supplychain #devsecops #kubernetes #docker

6 min read

Diego Diaz

Jul 16

CanisterWorm: El Mismo Grupo que Atacó Trivy Ahora Infecta 135 Paquetes de npm

#supplychain #npm #malware #devsecops

5 min read

Diego Diaz

Jul 16

Crunchyroll Hackeada: 100GB Robados vía un Empleado de Telus

#breach #supplychain #streaming #sony

5 min read

Diego Diaz

Jul 16

Dos Zero-Days en Chrome con Exploits Activos: Actualiza Ahora

#chrome #zeroday #cve20263909 #cve20263910

5 min read

Diego Diaz

Jul 16

Pay2Key Regresa: El Ransomware Iraní Que Paga el 80% a Sus Afiliados

#ransomware #iran #raas #geopolitica

6 min read

Diego Diaz

Jul 16

LexisNexis Hackeada: Jueces Federales y Abogados del DOJ Expuestos con Password "Lexis1234"

#breach #legal #aws #react

5 min read

Diego Diaz

Jul 16

Three Microsoft Defender Zero-Days Under Active Attack; Two Remain Unpatched

#zeroday #microsoftdefender #cve202633825 #cisa

3 min read

Diego Diaz

Jul 16

ADT Confirms Data Breach: ShinyHunters Claim 10 Million Records Stolen

#breach #adt #shinyhunters #extortion

5 min read

Diego Diaz

Jul 16

Anthropic MCP RCE: 7,000 Servers Exposed and Why L1 Fast-Path Matters

#aegis #mcp #anthropic #rce

2 min read

Diego Diaz

Jul 16

Booking.com Breach: When the Vendor Chain Becomes the Attack Surface

#breach #booking #vendorchain #supplychain

1

2 min read

Diego Diaz

Jul 16

Ollama Model Loading RCE: Three Years of the Same Bug Class, One Self-Hosted LLM Runtime

#rce #ollama #llmsecurity #modelloading

7 min read

Diego Diaz

Jul 16

LMDeploy SSRF Vulnerability Exploited Within 13 Hours: What You Need to Know

#cve202633626 #ssrf #lmdeploy #aisecurity

2 min read

Diego Diaz

Jul 16

Itron Smart Meter Breach: 28M Utility Customers Exposed via API Flaw

#breach #iot #apisecurity #utility

5 min read

Diego Diaz

Jul 16

GitHub Actions Supply Chain in 2026: tj-actions, Trivy, Bitwarden, and the Year the Bots Showed Up

#supplychain #githubactions #cicd #backdoor

8 min read

Diego Diaz

Jul 16

Adobe Reader Zero-Day CVE-2026-34621: Prototype Pollution + Use-After-Free Exploited Since November 2025

#cve #adobe #acrobatreader #zeroday

7 min read

Diego Diaz

Jul 16

SonicWall SMA 1000 Series Hit by Active Zero-Day Exploits (CVE-2026-15409 & CVE-2026-15410)

#sonicwall #zeroday #cve202615409 #cve202615410

2 min read

Diego Diaz

Jul 16

Lovable BOLA: 48 Days, Five API Calls, Source Code + Database Credentials of Other People's Projects

#bola #apisecurity #aiplatform #vibecoding

7 min read

Diego Diaz

Jul 15

Kubernetes RBAC in 2026: From nodes/proxy to AKS CVE-10.0 — Three Real Paths to Cluster-Admin

#kubernetes #rbac #privilegeescalation #helm

7 min read

Diego Diaz

Jul 15

CVE-2026-41940: cPanel Auth Bypass Exploited 65 Days as 0-Day, 1.5M Servers Exposed

#cve #cpanel #whm #authbypass

7 min read

Diego Diaz

Jul 15

France's ID Agency Breach Exposes 19 Million Passport and National ID Records

#databreach #france #identity #government

4 min read

Diego Diaz

Jul 15

cPanel Zero-Day CVE-2026-41940: Authentication Bypass Hit 1.5M Servers Before Patch

#cve202641940 #cpanel #zeroday #authenticationbypass

3 min read

Diego Diaz

Jul 15

CVE-2026-41940: cPanel Authentication Bypass Hit 1.5M Servers Before Anyone Noticed

#cpanel #cve202641940 #zeroday #authenticationbypass

3 min read

Diego Diaz

Jul 15

Next.js API Security Vulnerabilities: The 10 Most Common Findings (2026)

#pentest101 #indie #vibecoding

6 min read

Diego Diaz

Jul 15

¿Qué es el Pentesting? Guía Completa 2026 para Startups

#pentest101 #indie

5 min read

Diego Diaz

Jul 15

Supabase Security Checklist 2026: 15 Checks Esenciales para Producción

#pentest101 #indie #prelaunch

5 min read

Diego Diaz

Jul 15

Startup Security Audit Checklist 2026: 50 Checks Before You Ship

#pentest101 #indie #prelaunch

5 min read

Diego Diaz

Jul 15

CVE-2026-32202: APT28 Exploits Incomplete Windows Patch to Steal NTLM Hashes Zero-Click

#cve202632202 #apt28 #windowssecurity #ntlmhash

3 min read

Diego Diaz

Jul 15

Penetration Testing for Startups in 2026: The Complete Founder's Guide

#pentest101 #indie

8 min read

Diego Diaz

Jul 15

CVE-2026-23918: Apache HTTP/2 Double-Free Flaw Lets Attackers Crash Servers and Potentially Execute Remote Code

#cve202623918 #apachehttpserver #http2 #remotecodeexecution

4 min read

Diego Diaz

Jul 15

Ivanti EPMM CVE-2026-6973 RCE Is Under Active Exploit — Patch by Sunday

#cve20266973 #ivantiepmm #rce #cisakev

4 min read

Diego Diaz

Jul 15

I scanned 100 vibe-coded apps. 73 had a BOLA.

#vibecoding #prelaunch #indie

6 min read

Diego Diaz

Jul 15

The 8-item security checklist no one tells indie devs

#prelaunch #indie #pentest101

6 min read

Diego Diaz

Jul 15

Dirty Frag: Chained Linux Kernel Flaws Give Root on Every Major Distribution

#linuxkernel #privilegeescalation #cve202643284 #cve202643500

4 min read

Diego Diaz

Jul 15

How BOLA killed my MVP (and what I wish I'd done before launch)

#indie #breach #pentest101

5 min read

Diego Diaz

Jul 15

Fake OpenAI Repo on Hugging Face Delivered Rust Infostealer to 244,000 Developers

#huggingface #supplychainattack #infostealer #openai

4 min read

Diego Diaz

Jul 15

Two Critical CVEs Hit Hugging Face: TGI DoS (CVE-2026-0599) and LeRobot Unauthenticated RCE (CVE-2026-25874)

#huggingface #cve20260599 #cve202625874 #textgenerationinference

5 min read

Diego Diaz

Jul 15

Exim CVE-2026-45185 — Unauthenticated RCE in the World's Most Deployed Mail Server

#exim #cve202645185 #rce #mailserver

1

3 min read

Diego Diaz

Jul 15

Hackers Used AI to Build a Zero-Day That Bypasses Two-Factor Authentication — Google Stopped It

#aithreats #zeroday #2fabypass #googlegtig

4 min read

Diego Diaz

Jul 15

Mini Shai-Hulud Worm Hits 172 npm Packages — Including TanStack, Mistral AI, and Guardrails AI

#supplychainattack #npmworm #shaihulud #tanstack

3 min read

Diego Diaz

Jul 15

Microsoft Patches 138 Vulnerabilities: Netlogon and DNS RCE Flaws Lead May Update

#microsoft #patchtuesday #cve202641089 #cve202641096

4 min read

Diego Diaz

Jul 15

Hugging Face Double CVE: TGI DoS and LeRobot RCE Expose AI Infrastructure

#huggingface #cve20260599 #cve202625874 #aisecurity

4 min read

Diego Diaz

Jul 14

NGINX Rift: 18-Year-Old Heap Overflow Lets Attackers Hijack One-Third of the Web

#nginx #cve202642945 #rce #supplychain

3 min read

Diego Diaz

Jul 14

PraisonAI Auth Bypass Was Scanned 4 Hours After Disclosure — And It's an AI Agent Framework

#praisonai #cve202644338 #aiagents #authbypass

4 min read

Diego Diaz

Jul 14

Microsoft Patch Tuesday 2026: 622 Fixes Including Two Actively‑Exploited Zero‑Days

#microsoftpatch #zeroday #cve202656155 #sharepoint

2 min read

Diego Diaz

Jul 14

Claw Chain: Four OpenClaw Vulnerabilities Expose 245,000 AI Agent Servers to Data Theft

#openclaw #clawchain #cyera #aiagentsecurity

3 min read

Diego Diaz

Jul 14

Cisco SD-WAN Auth Bypass CVE-2026-20182 Added to CISA KEV — Patch by May 17

#cisco #sdwan #cve202620182 #cisakev

3 min read

Diego Diaz

Jul 14

Microsoft Exchange OWA Zero-Day CVE-2026-42897 Exploited via Crafted Emails

#microsoftexchange #zeroday #cve202642897 #xss

3 min read

Writing Debut