DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Gheist: 13,500 secret-dumping workflows planted with stolen GitHub tokens — audit yours in 5 minutes

Gheist: 13,500 secret-dumping workflows planted with stolen GitHub tokens — audit yours in 5 minutes

7
Comments
4 min read
Supply Chain Attacks: When Trusted Dependencies Become a Security Risk

Supply Chain Attacks: When Trusted Dependencies Become a Security Risk

Comments
3 min read
Two Junos J-Web Authentication Failures Turn the Management Interface Into a Root Backdoor

Two Junos J-Web Authentication Failures Turn the Management Interface Into a Root Backdoor

Comments
4 min read
The Shadow AI Agent Problem Lands at the Tool Call

The Shadow AI Agent Problem Lands at the Tool Call

Comments
3 min read
CVE-2026-102175: A Pre-Authentication Heap Overflow in Junos sdxd Puts Root Code Execution Behind a Service-Deployment Link

CVE-2026-102175: A Pre-Authentication Heap Overflow in Junos sdxd Puts Root Code Execution Behind a Service-Deployment Link

Comments
4 min read
My safety check failed correctly, then told me to run the command that would have destroyed the evidence

My safety check failed correctly, then told me to run the command that would have destroyed the evidence

Comments
6 min read
CVE-2026-101983: A Stack Overflow in Junos httpd Reaches the Routing Engine Through J-Web

CVE-2026-101983: A Stack Overflow in Junos httpd Reaches the Routing Engine Through J-Web

Comments
4 min read
CVE-2026-101982 and CVE-2026-101990: Two Route-Advertisement Bugs That End in Root on Junos

CVE-2026-101982 and CVE-2026-101990: Two Route-Advertisement Bugs That End in Root on Junos

Comments
4 min read
Actively exploited this week: 8 new CISA KEV entries (19 October to 25 October 2026)

Actively exploited this week: 8 new CISA KEV entries (19 October to 25 October 2026)

Comments
3 min read
CVE-2026-102178: BGP Flowspec Re-Advertisement Pushes a Stack Overflow Into the Junos Routing Engine

CVE-2026-102178: BGP Flowspec Re-Advertisement Pushes a Stack Overflow Into the Junos Routing Engine

Comments
4 min read
Nine CVSS 9.8 Junos Flaws in One Bulletin: A Practical Patch-Ordering Decision for Network Teams

Nine CVSS 9.8 Junos Flaws in One Bulletin: A Practical Patch-Ordering Decision for Network Teams

Comments
4 min read
Why the Junos October 2026 Flaws Matter Even Without a CISA KEV Entry

Why the Junos October 2026 Flaws Matter Even Without a CISA KEV Entry

Comments
4 min read
Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

Comments
4 min read
Before You Patch: Auditing Which Junos Devices Are Actually Exposed to the October 2026 Critical Flaws

Before You Patch: Auditing Which Junos Devices Are Actually Exposed to the October 2026 Critical Flaws

1
Comments
4 min read
Auditorio de draw.io segunda parte

Auditorio de draw.io segunda parte

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.