kozhevniko - DEV Community

kozhevniko

Oct 23

Authelia returns 11,813 titles on a port that is not supposed to be public

#security

3 min read

kozhevniko

Oct 23

What PHP's CVSS 9.2 rating means for shared hosting after CVE-2026-109618

#php #remotecodeexecution #cve2026109618 #vulnerability

3 min read

kozhevniko

Oct 23

Three VeloCloud Orchestrator bugs in one quarter: what CVE-2026-114625 says about the product's attack surface

#vulnerability #sdwan #arista #velocloud

3 min read

kozhevniko

Oct 23

Someone Else's Appliance: Third-Party Remote Support and the Visibility Gap

#zoomeye #thirdpartyrisk #beyondtrust #msp

4 min read

kozhevniko

Oct 23

Measuring self-managed GitLab exposure without counting the wrong thing

#security #zoomeyearticle

1

3 min read

kozhevniko

Oct 22

When You Cannot Patch VeloCloud Orchestrator Today: A CVE-2026-114625 Playbook

#mitigation #incidentresponse #networksecurity #velocloud

2 min read

kozhevniko

Oct 22

When the WAF is the entry point: SiteGuard CVE-2026-106931 and patching before forensics

#security #cybersecurityarticle

4 min read

kozhevniko

Oct 22

Turn Your Exposure List Into an Incident Response Drill

#fortinet #incidentresponse #tabletopexercise #zoomeye

3 min read

kozhevniko

Oct 22

CVE-2026-0313: Building Detection Coverage for the Cortex OS Query Command Injection

#vulnerability #cortexxsoar #cve20260313

4 min read

kozhevniko

Oct 22

Five Flaws, One Release: Why MariaDB Patch Priority Is Not a CVSS Sort

3 min read

kozhevniko

Oct 22

Hunting GlobalProtect Exposure After CVE-2026-0315: A macOS Endpoint Checklist

#detection #macos #threathunting #globalprotect

4 min read

kozhevniko

Oct 22

2,900 sign-in attempts a minute: what the ConnectWise campaign teaches about third-party application trust

#supplychain #connectwise #storm0940 #oauth

1

4 min read

kozhevniko

Oct 22

Timeline discipline for the OpenVPN 2.7.8 change

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

kozhevniko

Oct 21

Auditing an Estate You Inherited: Refrigeration Controllers Included

#ics #exposuremanagement

2 min read

kozhevniko

Oct 21

A Decision Brief on CVE-2026-102037 for Security Leadership

#security #juniper #junos #srx

2 min read

kozhevniko

Oct 21

When the Gateway Becomes the Foothold: CVE-2026-33792 and the Trust We Place in Firewalls

#juniper #srx #riskmanagement #cve202633792

3 min read

kozhevniko

Oct 21

Secrets in CI Variables: Rotation Discipline Beats Scanning

#cicd #secretsmanagement #cloudsecurity

5 min read

kozhevniko

Oct 20

Reading the CVE-2026-96951 record properly: what the vendor said and what it did not

#vulnerability #windows #cve202696951

3 min read

kozhevniko

Oct 20

CVE-2026-70024 and the Economics of an Emergency Patch

#cybersecurity #infosec #security

3 min read

kozhevniko

Oct 20

The Purdue Model as a Segmentation Contract, Not a Diagram

#otsecurity #ics #networksegmentation #iec62443

3 min read

kozhevniko

Oct 19

CVE-2026-85880: the ALPC sandbox escape explains why patch scores mislead

#microsoft #windows #alpc #elevationofprivilege

2 min read

kozhevniko

Oct 19

The MOVEit Transfer Threat Model Has Not Changed: Reading the 2026 Batch Against 2023

#vulnerability #moveittransfer #cve202689069 #operations

3 min read

kozhevniko

Oct 19

CVE-2026-89076 and the Reporting Endpoint Problem in File Transfer Platforms

#vulnerability #moveittransfer #filetransfer #patchmanagement

2 min read

kozhevniko

Oct 19

735,408 RabbitMQ Fingerprints: The Message Broker That Sits Between Everything

#zoomeye #messagebroker #attacksurface

1

4 min read

kozhevniko

Oct 18

The Legacy Branch Problem in the ModSecurity September 2026 Batch

#security #modsecurity #waf #vulnerability

2 min read

kozhevniko

Oct 18

VMSA-2026-0007: two escapes from a VMware guest, and no configuration that stops them

#security #vulnerability #virtualization #vmware

3 min read

kozhevniko

Oct 18

Low-Code LLM Builders Deserve a Security Review, Not Just a Prototype Label

#security #ai #exposure #zoomeye

2 min read

kozhevniko

Oct 18

The New Attack Surface Has an API: Measuring Exposed AI Infrastructure

#aisecurity #attacksurface #zoomeye #exposuremanagement

3 min read

kozhevniko

Oct 17

Supply Chain Consequences of a MOVEit Authentication Bypass

#security #vulnerability #moveit #cve202689068

2 min read

kozhevniko

Oct 17

Egress Filtering: The Control That Makes Exfiltration Expensive

#security #network #detection

2 min read

kozhevniko

Oct 17

SonicWall SMA exposure: what a CVSS 10.0 on a remote access appliance costs

#zoomeye #exposuremanagement

3 min read

kozhevniko

Oct 16

Server Administration Panels in Search Results: A Measured View

#exposure #serveradministration #hardening

3 min read

kozhevniko

Oct 16

From Snapshot to Baseline: Making Today's Counts Useful Tomorrow

#security #wordpress #clickfix #zoomeye

3 min read

kozhevniko

Oct 16

CVE-2026-76280: Splunk Enterprise Flaws That Upgrading Alone Does Not Fix

#splunk #configuration #patching #operations

2 min read

kozhevniko

Oct 16

Reading a KEV batch: turning seven exploited vulnerabilities into a 72-hour action list

#vulnerabilitymanagement #cisakev #triage

3 min read

kozhevniko

Oct 16

CVE-2026-76266 questions answered for Splunk administrators

#security #vulnerability #splunk #cve202676266

2 min read

kozhevniko

Oct 15

CVE-2026-55420 for Regulated Environments: Evidence, Deadlines and Audit Trails

#cybersecurity #infosec #security

3 min read

kozhevniko

Oct 15

Cisco ISE CVE-2026-76460: a small fingerprint with a large consequence

#zoomeye #exposuremanagement #networkaccesscontrol

2 min read

kozhevniko

Oct 15

17,856 Reachable MLflow Servers: Experiment Tracking Is Infrastructure Now

#zoomeye #exposure #attacksurface

1

2 min read

kozhevniko

Oct 15

CVE-2026-93616 and the Risk of Exposing Check Point Management Interfaces

#cybersecurity #infosec #security

3 min read

kozhevniko

Oct 15

How much of the public internet runs on Caddy? A ZoomEye measurement of 1.7 million assets

#webserver #exposure #caddy #measurement

4 min read

kozhevniko

Oct 15

Time-of-check to time-of-use is a design problem, not a lint warning

#security #applicationsecurity

2 min read

kozhevniko

Oct 15

Nearly 600 Million Apache and 312 Million nginx Instances: Triage in a Ubiquitous Fleet

#zoomeye #exposure #webservers #triage

2 min read

kozhevniko

Oct 14

CVE-2026-17106: how the CopyEscape flaws in docker cp let a container reach the host

#vulnerability #docker #containerescape #research

1

2 min read

kozhevniko

Oct 14

CVE-2026-20079: Root on Cisco Secure FMC Through a Crafted HTTP Request

#cisco #cybersecurity #security

2 min read

kozhevniko

Oct 14

CVE-2026-76464 in context: the other identifiers in the same advisory

#cybersecurity #infosec #security

2 min read

kozhevniko

Oct 14

Cisco FMC CVE-2026-20079: when the management plane is the target

#vulnerability #ransomware #networkmanagement

3 min read

kozhevniko

Oct 13

CVE-2026-85889: the Azure AI Foundry 10.0 was fixed before anyone could use it

#azure #aiplatform #cwe306 #controlplane

3 min read

kozhevniko

Oct 13

Lessons from the Apache NiFi Bundle Traversal: When Trusted Metadata Becomes a Path Injection

#apachenifi #apachemyfaces #vulnerability #datapipeline

2 min read

kozhevniko

Oct 13

A Disclosed SSRF and a 2027 Patch Date: Running Cisco Finesse Without a Vendor Fix

#security

2 min read

kozhevniko

Oct 13

Patching PRTG: What Build 26.2.120.1449 Changes for CVE-2026-4637 and CVE-2026-4638

#vulnerability #prtg #cve20264638

3 min read

kozhevniko

Oct 13

CouchDB in external measurements: 983,358 fingerprint matches and 227 title matches

#database #couchdb #fingerprintcoverage

2 min read

kozhevniko

Oct 12

CVE-2026-96361 Risk Ranking: Applying the CERT-BUND Damage and Probability Scores

#security #drupal #cve202696361 #riskmanagement

2 min read

kozhevniko

Oct 12

CVE-2026-96357 Exposure Context: What 436263 Drupal Instances Mean

#security #drupal #cve #vulnerability

2 min read

kozhevniko

Oct 12

TLS certificate lifetimes drop to 100 days in March 2027: what breaks first

#pki #tls #certificatelifecycle #automation

2 min read

kozhevniko

Oct 12

TeamCity Kotlin DSL Sandbox Escape Lets a User Run Code on the Build Host

#security #vulnerability #jetbrains #teamcity

2 min read

kozhevniko

Oct 12

Greenbone on 3,657 hosts: the scanner that knows where every weakness is

#security #zoomeye #exposure #vulnerabilitymanagement

3 min read

kozhevniko

Oct 12

Build Infrastructure Is a Trust Anchor: Threat Modelling Exposed CI/CD and Artifact Repositories

#supplychain #cicd #artifactrepository #threatmodelling

3 min read

kozhevniko

Oct 11

ServiceNow CVE-2026-18885, CVE-2026-18886 and CVE-2026-74820: a CVSS 10.0 platform flaw under active exploitation

#security #vulnerability #itsm #exploitedinthewild

3 min read

kozhevniko

Oct 11

FortiMail on the Open Internet: 3,911 Fingerprints and 5,322 Title Matches for a Mail Gateway Under Active Exploitation

#security #exposure #zoomeye #emailsecurity

2 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with kozhevniko?