DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Gheist: 13,500 secret-dumping workflows planted with stolen GitHub tokens — audit yours in 5 minutes

Gheist: 13,500 secret-dumping workflows planted with stolen GitHub tokens — audit yours in 5 minutes

6
Comments
4 min read
My safety check failed correctly, then told me to run the command that would have destroyed the evidence

My safety check failed correctly, then told me to run the command that would have destroyed the evidence

Comments
6 min read
CVE-2026-101982 and CVE-2026-101990: Two Route-Advertisement Bugs That End in Root on Junos

CVE-2026-101982 and CVE-2026-101990: Two Route-Advertisement Bugs That End in Root on Junos

Comments
4 min read
Actively exploited this week: 8 new CISA KEV entries (19 October to 25 October 2026)

Actively exploited this week: 8 new CISA KEV entries (19 October to 25 October 2026)

Comments
3 min read
CVE-2026-102178: BGP Flowspec Re-Advertisement Pushes a Stack Overflow Into the Junos Routing Engine

CVE-2026-102178: BGP Flowspec Re-Advertisement Pushes a Stack Overflow Into the Junos Routing Engine

Comments
4 min read
Nine CVSS 9.8 Junos Flaws in One Bulletin: A Practical Patch-Ordering Decision for Network Teams

Nine CVSS 9.8 Junos Flaws in One Bulletin: A Practical Patch-Ordering Decision for Network Teams

Comments
4 min read
Why the Junos October 2026 Flaws Matter Even Without a CISA KEV Entry

Why the Junos October 2026 Flaws Matter Even Without a CISA KEV Entry

Comments
4 min read
Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

Comments
4 min read
Node2Shell: Memory Corruption RCE in Brotli Affecting Node.js

Node2Shell: Memory Corruption RCE in Brotli Affecting Node.js

Comments
4 min read
Before You Patch: Auditing Which Junos Devices Are Actually Exposed to the October 2026 Critical Flaws

Before You Patch: Auditing Which Junos Devices Are Actually Exposed to the October 2026 Critical Flaws

1
Comments
4 min read
Auditorio de draw.io segunda parte

Auditorio de draw.io segunda parte

Comments
2 min read
k0t Edge Device Campaign Exposes 70,000+ Credentials Through FortiGate and GlobalProtect Appliances

k0t Edge Device Campaign Exposes 70,000+ Credentials Through FortiGate and GlobalProtect Appliances

Comments
5 min read
Why any X-Plex-Token value matters in the Plex timeline SSRF

Why any X-Plex-Token value matters in the Plex timeline SSRF

Comments
3 min read
CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python

CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python

Comments
6 min read
The Plex transcode path that accepts arbitrary hosts, and what that means for internal networks

The Plex transcode path that accepts arbitrary hosts, and what that means for internal networks

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.