DEV Community

#incidentresponse

The process of responding to and managing security incidents and breaches.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Reachable Is Not the Same as Compromised: Scoping BeyondTrust Appliances After CVE-2026-102764

Reachable Is Not the Same as Compromised: Scoping BeyondTrust Appliances After CVE-2026-102764

Comments
3 min read
Blast Radius of an Appliance Credential: What CVE-2026-102764 Put at Risk

Blast Radius of an Appliance Credential: What CVE-2026-102764 Put at Risk

Comments
3 min read
When the WAF Host Is Compromised: CVE-2026-106931 and Evidence You Still Own

When the WAF Host Is Compromised: CVE-2026-106931 and Evidence You Still Own

1
Comments
3 min read
Collecting SiteGuard Diagnostic Information Before the CVE-2026-106931 Patch

Collecting SiteGuard Diagnostic Information Before the CVE-2026-106931 Patch

Comments
3 min read
CVE-2026-106931 Response Order: Export Evidence Before You Patch SiteGuard

CVE-2026-106931 Response Order: Export Evidence Before You Patch SiteGuard

Comments
4 min read
The attacker deleted everything. At 2 a.m., /proc still remembered.

The attacker deleted everything. At 2 a.m., /proc still remembered.

1
Comments 1
4 min read
Opening a Word file got lsass read. Remember 0x1410.

Opening a Word file got lsass read. Remember 0x1410.

Comments
2 min read
Cheap Embeddings and Rerank Alternatives: OpenAI, Cohere, Voyage Semantic Search

Cheap Embeddings and Rerank Alternatives: OpenAI, Cohere, Voyage Semantic Search

Comments
7 min read
AhsayCBS CVE-2026-105133 and CVE-2026-105134: The Backup Server as an Attack Platform

AhsayCBS CVE-2026-105133 and CVE-2026-105134: The Backup Server as an Attack Platform

Comments
3 min read
Recovering a PAN-OS firewall from CVE-2026-0321 maintenance mode

Recovering a PAN-OS firewall from CVE-2026-0321 maintenance mode

Comments
3 min read
Seventy-One Percent in Three Days: What a Fast Exposure Drop Actually Costs

Seventy-One Percent in Three Days: What a Fast Exposure Drop Actually Costs

Comments
4 min read
HTTP2Shell (CVE-2026-111497): WordPress and Next.js exposure

HTTP2Shell (CVE-2026-111497): WordPress and Next.js exposure

1
Comments
11 min read
Replayable Customer Support Speech-to-Text API Intake for MP3/WAV CRM Actions

Replayable Customer Support Speech-to-Text API Intake for MP3/WAV CRM Actions

Comments
8 min read
PHP session upload progress vulnerability after the PHP2Shell patch

PHP session upload progress vulnerability after the PHP2Shell patch

Comments
10 min read
The Appliance Holds the Keys: Credential Blast Radius After a BeyondTrust Compromise

The Appliance Holds the Keys: Credential Blast Radius After a BeyondTrust Compromise

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.