jeffrey - DEV Community

jeffrey

Oct 23

Account hygiene is the real control for CVE-2026-96655

#vulnerability #cve202696655 #plex #ssrf

3 min read

jeffrey

Oct 23

Oracle's October CPU: six 10.0s, and why T3 is still answering on your perimeter

#security #cybersecurityarticle

4 min read

jeffrey

Oct 23

Struts dynamic method invocation is off by default, and that is not the same as gone

#security

3 min read

jeffrey

Oct 23

Counting What Is Reachable: BeyondTrust Remote Support After the Armory Castle Intrusion

#zoomeye #exposure #beyondtrust #assetinventory

4 min read

jeffrey

Oct 23

Arista VeloCloud Orchestrator CVE-2026-114625: a SQL injection that crosses the privilege boundary

#vulnerability #sdwan #arista #velocloud

4 min read

jeffrey

Oct 23

Node.js October 2026: A Brotli Out-of-Bounds Write and Three Ways to Fool Hostname Checks

#node #tls #memorysafety #patching

3 min read

jeffrey

Oct 23

Detecting exploitation attempts against CVE-2026-109618 without a public exploit

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

jeffrey

Oct 23

Exchange Server on the internet: reading exposure when the banner names the protocol, not the build

#security #zoomeyearticle

3 min read

jeffrey

Oct 22

Why an SD-WAN Orchestrator Is a Crown-Jewel Target: Lessons from CVE-2026-114625

#threatmodel #sdwan #networksecurity #arista

2 min read

jeffrey

Oct 22

Apache StreamPark: 167 Fingerprints, 170 Titles, and a Control Plane for Streaming Jobs

#zoomeye #streampark #flink #streaming

3 min read

jeffrey

Oct 22

CVE-2026-74041: where Wazuh Manager configuration becomes code

#vulnerability #wazuh #cve202674041 #securitymonitoring

2 min read

jeffrey

Oct 22

CVE-2026-107823: How a Crafted Username Becomes MariaDB Security Metadata

#cybersecurity #database #infosec #security

3 min read

jeffrey

Oct 22

Anatomy of CVE-2026-0313: How an OS Query Becomes a Remote Shell

#vulnerability #cortexxsoar #cve20260313

3 min read

jeffrey

Oct 22

Platform Boundaries in CVE-2026-0315: Why the Windows, Linux and Mobile Clients Stay Out of Scope

#scopemanagement #macos #globalprotect #changemanagement

4 min read

jeffrey

Oct 22

Detecting PAN-OS CVE-2026-0321 with the telemetry you already collect

#panos #cve20260321 #detectionengineering #monitoring

3 min read

jeffrey

Oct 22

CVE-2026-89111: SSRF in a Multi-Tenant SDK and the OAuth Credentials Behind It

#vulnerability #cloud #supplychain

3 min read

jeffrey

Oct 21

Two fixes, two audiences: explaining the OpenVPN advisories to management and to engineers

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

jeffrey

Oct 21

When the Product Name Is Not the Fingerprint

#ics #exposuremanagement

2 min read

jeffrey

Oct 21

Zone Design as a Mitigation for CVE-2026-102037

#security #juniper #junos #srx

2 min read

jeffrey

Oct 21

If GRE Must Stay: Compensating Architectures for CVE-2026-33792

#networkdesign #gre #juniper #cve202633792

3 min read

jeffrey

Oct 21

Nine CVEs, Nine Zeros: What Empty vul.cve Results Actually Mean

#zoomeye #measurement #vulnerabilityintelligence

3 min read

jeffrey

Oct 21

8.16 Million WordPress Sites and 5.16 Million in the US: Reading a CMS Baseline

#zoomeye #websecurity #cms

1

3 min read

jeffrey

Oct 21

38,988 FortiGate and 22,586 Palo Alto Assets: Using Perimeter Counts to Challenge Firewall Inventory

#zoomeye #networksecurity #inventory

3 min read

jeffrey

Oct 20

1.2 Million Ivanti Assets and 3 Under the Old Brand: Naming Drift in Exposure Queries

#zoomeye #measurement #vendortracking

3 min read

jeffrey

Oct 20

CVE-2026-70024 in Review: What Would Change the Assessment

#cybersecurity #infosec #microsoft #security

3 min read

jeffrey

Oct 20

The 24.3.1 line: upgrade debt behind CVE-2026-102764

#vulnerability #beyondtrust #cve2026102764 #remotesupport

3 min read

jeffrey

Oct 20

SBOM Minimum Elements in Practice: What Breaks After the First Release

#sbom #supplychain #softwarecompositionanalysis

1

3 min read

jeffrey

Oct 19

Why CWE-294 Replay Flaws Keep Appearing in Enterprise Messaging

#microsoftexchange #vulnerability #cve202662911 #security

3 min read

jeffrey

Oct 19

Pgpool-II client certificate validation bypass: what CVE-2026-92868 changes

#security #postgres #pgpool #cve

4 min read

jeffrey

Oct 18

3.9 million PostgreSQL services and the pg_hba line that decides everything

#exposure #postgres #authentication

3 min read

jeffrey

Oct 18

CVE-2026-96357 and the Audit Trail: Documenting a Shared-Impact Advisory

#security #drupal #cve #vulnerability

2 min read

jeffrey

Oct 18

From Service Account to Root: What CVE-2026-102490 Actually Buys an Attacker

#vulnerability #zammad #cve2026102490 #helpdesk

2 min read

jeffrey

Oct 17

code-server at 26,014 Fingerprints and 2,495 Web Titles: Measuring a Browser That Runs Your Shell

#zoomeye #exposure #developmentenvironments

4 min read

jeffrey

Oct 17

Reading the CVE-2026-76267 advisory as a version matrix

#splunk #cve202676267 #loginjection #cwe117

3 min read

jeffrey

Oct 17

CVE-2026-89068: a missing authentication step in the MOVEit Transfer LDAP module

#security #vulnerability #moveit #filetransfer

3 min read

jeffrey

Oct 17

Auditing Splunk Secure Gateway for CVE-2026-76272: version checks, roles and reachability

#cybersecurity #infosec #security

2 min read

jeffrey

Oct 17

A Passed options Dict: How PyJWT's decode() Silently Rewrote a Caller's Configuration

#bug #python #security

3 min read

jeffrey

Oct 16

CVE-2026-87902 Under Active Exploitation: 64 Honeypot Attempts and a GitHub-Hosted Webshell

#security #wordpress #vulnerability #rce

3 min read

jeffrey

Oct 16

Prioritizing the six DolphinScheduler CVEs: severity, exposure and patch order

#apachedolphinscheduler #authorizationbypass #kubernetes #cve202671895

2 min read

jeffrey

Oct 16

Logging Gaps That Hide Replayed MOVEit Transfer Sessions

#authentication #cybersecurity #infosec #security

2 min read

jeffrey

Oct 16

Zulip: 813 title matches for an organisation's internal conversation store

#zoomeye #collaboration #internetmeasurement #exposure

2 min read

jeffrey

Oct 16

Credential stuffing breaks the control most teams rely on

#authentication #credentialstuffing #mfa #detection

4 min read

jeffrey

Oct 15

ScyllaDB, Debezium and Falco: three near-zero observations and how to read them

#zoomeye #scylladb #debezium #falco

2 min read

jeffrey

Oct 15

Shared Elasticsearch clusters and the stream-claim flaw rated 8.8

#security #elastic #fleet #kibana

1

2 min read

jeffrey

Oct 14

Input Validation, Three Ways: Depth, Allocation and Cost in the LDAP API Batch

#cybersecurity #infosec #security

2 min read

jeffrey

Oct 14

What WID-SEC-2026-3554 Does Not Say About CVE-2026-96369

#security #vulnerability #drupal #cve202696369

3 min read

jeffrey

Oct 14

Inside CVE-2026-102489: The Zammad Session Hijack That Ends in Code Execution

#zammad #cve2026102489 #sessionhijacking #cwe384

5 min read

jeffrey

Oct 14

Label Studio: 4,451 title matches on an annotation platform that holds training data

#zoomeye #exposure #datasecurity

3 min read

jeffrey

Oct 13

Fireware OS version drift: keeping CVE-2026-18145 from reopening

#watchguard #firewareos #versiondrift #cve202618145

2 min read

jeffrey

Oct 13

CVE-2026-80521: An AF_UNIX Use-After-Free That Crosses the Container Boundary

#linuxkernel #afunix #containerescape #cve202680521

4 min read

jeffrey

Oct 13

Collaboration Platforms Under Measurement: 185,584 Confluence and 91,979 Jira Instances

#zoomeye #exposure #collaboration #patchmanagement

2 min read

jeffrey

Oct 13

Patching Argo CD to v3.5.4, v3.4.10, v3.3.15 or v3.6.0-rc2: A Migration Checklist

#argocd #cve202677459 #kubernetes #gitops

2 min read

jeffrey

Oct 13

The dependency problem behind CVE-2026-103877: patching a library that hides inside other software

#security #vulnerability #apache #ldap

3 min read

jeffrey

Oct 13

Ignition gateways: 5,037 application matches and 3,146 titles on an industrial control platform

#industrialcontrol #scada #exposuremeasurement #zoomeye

2 min read

jeffrey

Oct 12

Apache Hue answers on 183,061 hosts by title and holds no application fingerprint

#zoomeye #hadoop #exposure

2 min read

jeffrey

Oct 12

Hunting Gitea SSRF Abuse: Detection Guidance for CVE-2026-101027

#gitea #ssrf #cve2026101027 #selfhosted

2 min read

jeffrey

Oct 12

Langflow CVE-2026-0768: An Unauthenticated Route to Code Execution in an AI Workflow Builder

#vulnerability #aiplatform #rce #credentialtheft

3 min read

jeffrey

Oct 12

The paper trail is the deliverable in a compromise recovery

#incidentresponse #governance

3 min read

jeffrey

Oct 12

mailcow: 2 fingerprint matches against 67,430 title matches

#exposure #email

2 min read

jeffrey

Oct 12

RethinkDB at 1,419 Matches and Nothing on 28015: When the Driver Port Is the Right Question

#cybersecurity #database #security

3 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with jeffrey?