andreagomez - DEV Community

andreagomez

Oct 23

The signed binary was fine: Siemens Software Center CVE-2026-110936 and the DLL next to it

#security #cybersecurityarticle

4 min read

andreagomez

Oct 23

ONLYOFFICE's upload path walked out of the upload directory and took the document server with it

#security

3 min read

andreagomez

Oct 23

The Eight-Day Gap: Patch, Disclosure and Exposure in the BeyondTrust Zero-Day

#zoomeye #patchmanagement #beyondtrust #riskwindow

4 min read

andreagomez

Oct 23

A partner can manage many customers: why VeloCloud tenant structure raises the stakes of CVE-2026-114625

#vulnerability #sdwan #arista #velocloud

3 min read

andreagomez

Oct 23

LibreChat: 12,283 fingerprints, 13,265 titles, and a chat front end that stores the keys to every model

#security

3 min read

andreagomez

Oct 23

Hunting CVE-2026-114625: What to Look for After the VeloCloud Orchestrator Patch

#detection #incidentresponse #sdwan #arista

2 min read

andreagomez

Oct 22

Apache httpd's October fixes and the mod_vhost_alias precondition nobody checks

#security #zoomeyearticle

1

3 min read

andreagomez

Oct 22

AgentGPT: 1,022 Fingerprinted Deployments Where the Stored Secret Is an LLM API Key

#zoomeye #agentgpt #llmsecurity #apikeyexposure

3 min read

andreagomez

Oct 22

78,207 ConnectWise Automate fingerprints cannot describe a Cloud Backup compromise

#zoomeye #connectwise #rmm #storm0940

4 min read

andreagomez

Oct 22

CVE-2026-107815: The CONNECT Storage Engine as a Write Primitive

3 min read

andreagomez

Oct 22

What ZoomEye Says and Does Not Say About CVE-2026-0313 Exposure

#vulnerability #cortexxsoar #cve20260313

3 min read

andreagomez

Oct 22

Audit and Evidence for CVE-2026-0315: Building a Defence File a Reviewer Can Trust

#compliance #audit #cve20260315 #macos

4 min read

andreagomez

Oct 22

How the four Plex CVEs relate: three request flaws and one path to code execution

#cybersecurity #infosec #security

2 min read

andreagomez

Oct 22

Patching Is Not Provisioning: What the October 2026 KEV Wave Says About Edge Device Lifecycle

#strategy #edgesecurity #vulnerabilitymanagement

4 min read

andreagomez

Oct 21

Certificate enrollment hygiene after CVE-2026-84790

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

andreagomez

Oct 21

Explaining a Refrigeration Outage to People Who Do Not Read Advisories

#ics #exposuremanagement

2 min read

andreagomez

Oct 21

Hardening Choices While CVE-2026-102037 Waits for a Change Window

#security #juniper #junos #srx

2 min read

andreagomez

Oct 21

CVE-2026-33792 for Incident Responders: What Root on an SRX Actually Looks Like

#incidentresponse #juniper #srx #cve202633792

3 min read

andreagomez

Oct 21

211,018 Zimbra and 62,630 Roundcube Assets: Choosing Which Webmail Surface to Defend First

#zoomeye #emailsecurity #exposure

3 min read

andreagomez

Oct 21

72,257 Titles Against 239,739 Fingerprints: Picking the Right NetScaler Field

#zoomeye #measurement #querydesign

1

3 min read

andreagomez

Oct 20

72,548 in the US, 20,655 in Germany: Reading Geographic Distribution Without Over-Reading It

#zoomeye #measurement #geolocation

3 min read

andreagomez

Oct 20

Measured Response: Closing CVE-2026-83701 Without Overreacting

#vulnerability #windows #privilegeescalation

3 min read

andreagomez

Oct 20

CVE-2026-70024 and the Case Against Fleet-Wide Compliance Percentages

#cybersecurity #infosec #security

2 min read

andreagomez

Oct 20

One Batch, Six Bugs: Placing CVE-2026-103552 Among the Apache LDAP API Fixes

#cybersecurity #infosec #java #security

2 min read

andreagomez

Oct 19

Verifying That CVE-2026-96369 Is Actually Fixed on Each Drupal Instance

#security #vulnerability #drupal #cve202696369

3 min read

andreagomez

Oct 19

Port 27017 and 1,676,736 Matches: Databases That Answer Before Anyone Authenticates

#mongodb #27017 #databaseexposure #authentication

2 min read

andreagomez

Oct 19

Web Management Interfaces as the Most Common Exposed Surface

#zoomeye #webexposure #https #managementinterfaces

2 min read

andreagomez

Oct 19

Eight CVEs, three Apache projects: placing CVE-2026-102795 in the October 2026 advisory batch

#vulnerability #apachetrafficserver #accesscontrol

2 min read

andreagomez

Oct 19

Reading the MOVEit Transfer Disclosure Correctly: What the CVE Records Confirm

#cybersecurity #infosec #security

3 min read

andreagomez

Oct 18

CVE-2026-79820 and the Two Faces of HPE Remote Management: iLO 7 and iMC

#security #vulnerability #hpeilo #cve202679820

2 min read

andreagomez

Oct 18

What Twelve High-Severity MOVEit Flaws Mean for an Audit Trail

#vulnerability #moveittransfer #cve202689076

3 min read

andreagomez

Oct 18

Consul: 78,092 Fingerprint Matches Against 1.7 Million Answers on Port 8500

#consul #exposure #servicediscovery

3 min read

andreagomez

Oct 18

Sizing CVE-2025-38680 Exposure: What 18.2 Million Linux SSH Hosts Do and Do Not Tell You

#linuxkernel #cve202538680 #zoomeye #exposure

2 min read

andreagomez

Oct 18

Threat Prevention Signatures and CVE-2026-0322: What limited Coverage Requires

#security #vulnerability #panos #cve20260322

3 min read

andreagomez

Oct 17

Vaultwarden at internet scale: 87,252 title matches on the self-hosted password vault

#security #zoomeye #exposure #passwordmanager

3 min read

andreagomez

Oct 17

Rogue DHCP servers and the layer-2 trust that makes them work

#networksecurity #dhcp #segmentation #layer2

2 min read

andreagomez

Oct 17

Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

#cybersecurity #infosec #security

3 min read

andreagomez

Oct 16

CWE-35 or CWE-22? The Classification Split Around CVE-2026-85706

#cwe22 #cwe35 #gitlab #detectionengineering

3 min read

andreagomez

Oct 16

Three Secure Gateway authorization findings in one Splunk batch: 76265, 76272 and 76280

#cybersecurity #infosec #security

2 min read

andreagomez

Oct 16

Apache Airflow on 73,265 observed hosts: the scheduler that holds every connection string

#attacksurface #zoomeye #airflow #datapipelines

2 min read

andreagomez

Oct 16

RouterOS management-plane exposure: measuring the SSH precondition

#security #zoomeye #routeros #exposure

2 min read

andreagomez

Oct 16

Authenticating WebSocket connections at the edge

#websocket #authentication #applicationsecurity

2 min read

andreagomez

Oct 16

Webform and Webform REST Flaws in the September 2026 Drupal Advisory

#security #drupal #vulnerability

3 min read

andreagomez

Oct 15

CVE-2026-76504: a Cisco SD-WAN Manager authentication bypass that needs no credential

#authentication #networksecurity #vulnerability

2 min read

andreagomez

Oct 15

Compromise Assessment After CVE-2026-76504: Building a Defensible Investigation Order

#vulnerability #cisco #sdwan #cve202676504

4 min read

andreagomez

Oct 15

Starting My Cybersecurity Journey

#beginners #cybersecurity #learning #security

1

1 min read

Writing Debut

Want to connect with andreagomez?