kozhevniko - DEV Community

kozhevniko

Oct 14

Cisco FMC CVE-2026-20079: when the management plane is the target

#vulnerability #ransomware #networkmanagement

3 min read

kozhevniko

Oct 13

CVE-2026-85889: the Azure AI Foundry 10.0 was fixed before anyone could use it

#azure #aiplatform #cwe306 #controlplane

3 min read

kozhevniko

Oct 13

Lessons from the Apache NiFi Bundle Traversal: When Trusted Metadata Becomes a Path Injection

#apachenifi #apachemyfaces #vulnerability #datapipeline

2 min read

kozhevniko

Oct 13

A Disclosed SSRF and a 2027 Patch Date: Running Cisco Finesse Without a Vendor Fix

#security

2 min read

kozhevniko

Oct 13

Patching PRTG: What Build 26.2.120.1449 Changes for CVE-2026-4637 and CVE-2026-4638

#vulnerability #prtg #cve20264638

3 min read

kozhevniko

Oct 13

CouchDB in external measurements: 983,358 fingerprint matches and 227 title matches

#database #couchdb #fingerprintcoverage

2 min read

kozhevniko

Oct 12

CVE-2026-96361 Risk Ranking: Applying the CERT-BUND Damage and Probability Scores

#security #drupal #cve202696361 #riskmanagement

2 min read

kozhevniko

Oct 12

CVE-2026-96357 Exposure Context: What 436263 Drupal Instances Mean

#security #drupal #cve #vulnerability

2 min read

kozhevniko

Oct 12

TLS certificate lifetimes drop to 100 days in March 2027: what breaks first

#pki #tls #certificatelifecycle #automation

2 min read

kozhevniko

Oct 12

TeamCity Kotlin DSL Sandbox Escape Lets a User Run Code on the Build Host

#security #vulnerability #jetbrains #teamcity

2 min read

kozhevniko

Oct 12

Greenbone on 3,657 hosts: the scanner that knows where every weakness is

#security #zoomeye #exposure #vulnerabilitymanagement

3 min read

kozhevniko

Oct 12

Build Infrastructure Is a Trust Anchor: Threat Modelling Exposed CI/CD and Artifact Repositories

#supplychain #cicd #artifactrepository #threatmodelling

3 min read

kozhevniko

Oct 11

ServiceNow CVE-2026-18885, CVE-2026-18886 and CVE-2026-74820: a CVSS 10.0 platform flaw under active exploitation

#security #vulnerability #itsm #exploitedinthewild

3 min read

kozhevniko

Oct 11

FortiMail on the Open Internet: 3,911 Fingerprints and 5,322 Title Matches for a Mail Gateway Under Active Exploitation

#security #exposure #zoomeye #emailsecurity

2 min read

kozhevniko

Oct 11

Synology DSM: 1,175,121 Fingerprint Matches Where File Storage Meets Remote Access

#synology #nas #remoteaccess #firewall

2 min read

kozhevniko

Oct 11

Race Conditions in File and State Transitions: Why a Lock on One Step Is Not a Control

#raceconditions #concurrency #applicationsecurity #toctou

3 min read

kozhevniko

Oct 11

Bitwarden and self-hosted password vaults: 172,580 fingerprints, 84,687 titles

#passwordmanager #bitwarden #identity

2 min read

kozhevniko

Oct 11

Known issues to expect when you install the Exchange V2 security update

#security #exchange #microsoft

2 min read

kozhevniko

Oct 10

A refresh token with no expiry is a password that does not get rotated

#security #identity #tokens

3 min read

kozhevniko

Oct 10

AI assisted commits leak secrets at roughly twice the rate, and the fix is process rather than policy

#secretsmanagement #supplychain #aicoding #credentialrotation

2 min read

kozhevniko

Oct 10

Industrial edge vendors under measurement: 2,805,294 Zyxel, 1,884,815 Draytek and 14,144 Moxa matches

#cybersecurity #iot #networking #security

2 min read

kozhevniko

Oct 10

Low-Code AI Builders: 40,653 Flowise and 10,860 Dify Title Matches

#security #exposuremanagement #zoomeye

2 min read

kozhevniko

Oct 10

Sizing the S7comm Surface: What 262 Reachable Port 102 Services Actually Tell You

#zoomeye #ics #exposuremeasurement #s7comm

3 min read

kozhevniko

Oct 10

Syslog on 973,278 hosts: the log channel that ships across every network boundary

#security

4 min read

kozhevniko

Oct 9

CVE-2026-94545 Exploitability Deep Dive: Escaping, Native Parsing and the Non-PIE Node Build

#security #vulnerability #nextjs

2 min read

kozhevniko

Oct 9

Frigate NVR surfaces: 4,999 fingerprinted instances and what a camera console exposes

#security #videosurveillance #exposure

3 min read

kozhevniko

Oct 9

CVE-2026-62911 and 22,000 Unpatched Exchange Servers

#exchange #emailsecurity #patching #cve202662911

2 min read

kozhevniko

Oct 9

CVE-2026-93674 and the Credential Risk in Self-Hosted LLM Platforms

#security #langflow #llm #credentials

2 min read

kozhevniko

Oct 9

Configuration decides exposure: mapping the NetScaler CVEs to the way appliances are deployed (CVE-2026-88776)

#security #vulnerability #citrix #netscaler

1

3 min read

kozhevniko

Oct 9

CVE-2026-103663 sits in the model delivery path, and that is what makes it dangerous

#ollama #cve2026103663 #softwaresupplychain #aiinfrastructure

1

2 min read

kozhevniko

Oct 8

Edge Servers as the Payload Delivery Surface: Sizing nginx and WordPress Exposure

#securityevent #crypter #malwareevasion #edgeexposure

2 min read

kozhevniko

Oct 8

MikroTrick: How Two RouterOS Flaws Let Attackers Take Over MikroTik Routers Without a Password

#security #vulnerability #router #edgedevice

3 min read

kozhevniko

Oct 8

What to look for when Twenty CRM credentials leak: detection ideas for CVE-2026-105763

#security #vulnerability #twentycrm

3 min read

kozhevniko

Oct 8

Detecting Exploitation Attempts Against NetScaler CVE-2026-88779

#security #detection #netscaler #cve202688779

2 min read

kozhevniko

Oct 8

176,926 Hosts on Port 5900: VNC's Persistent Place in the Exposed Service Inventory

#zoomeye #vnc #attacksurface #remoteaccess

3 min read

kozhevniko

Oct 8

TASK#STOMP: A Windows Backdoor That Lives in Scheduled Tasks and VBS

#malware #windows #persistence #detection

2 min read

kozhevniko

Oct 7

1,393 sports-sector matches are exposure, not evidence of compromise

2 min read

kozhevniko

Oct 7

SectopRAT in Tampered Audio Software Components: A Loader That Uses the Host's Own Imports

#security #sectoprat #rat #loader

1

4

3 min read

kozhevniko

Oct 7

FreeSWITCH mod_verto: a 2 MiB buffer and a 10 MiB Content-Length

#vulnerability #voip #memorysafety

4 min read

kozhevniko

Oct 7

One shellcode, two names: what Volexity's UTA0560 finding says about attribution confidence

#attribution #uta0560 #apt31 #threatintelligence

4 min read

kozhevniko

Oct 6

The September 2026 KEV wave as an operations dataset, not a news cycle

#cisakev #vulnerabilitymanagement #edgesecurity

2 min read

kozhevniko

Oct 6

Apache Zeppelin on the Internet: 25,617 Fingerprint Matches and a Notebook With Cluster Credentials

#security #exposuremanagement #zoomeye

2 min read

kozhevniko

Oct 6

1,897,463 MongoDB services: how unauthenticated data stores became routine

#zoomeye #exposure #mongodb #datasecurity

1

2 min read

kozhevniko

Oct 6

6,378,556 Hosts on Port 10250: The Cluster Node Interface That Assumes a Trusted Network

#exposuremanagement #containersecurity

3 min read

kozhevniko

Oct 6

GitOps control planes: the Argo CD exposure question

#zoomeye #argocd #gitops #exposure

1

2 min read

kozhevniko

Oct 6

Group-IB's August 2026 APAC Ransomware Data: What 190 Incidents Actually Tell You

#security #ransomware #threatintelligence #apac

2 min read

kozhevniko

Oct 5

Detection and verification for CVE-2026-102795 in Apache Traffic Server

#vulnerability #apachetrafficserver #accesscontrol

2 min read

kozhevniko

Oct 5

FusionAuth: 2,411 title matches on the authentication server that issues your tokens

#zoomeye #fusionauth #identity #tokens

2 min read

kozhevniko

Oct 5

CVE-2026-80097: The Authenticator App Is a Credential Store, Not Just a Prompt

#identity #mfa #mobile #authentication

2 min read

kozhevniko

Oct 5

Container Registries and Orchestration: 57,017 Harbor and 78,059 Consul Fingerprints

#cloud #devops #docker #infrastructure

2 min read

kozhevniko

Oct 5

Drupal Contributed Modules: 36 CVEs in One September 2026 Advisory Batch

#security #drupal #vulnerability

2 min read

kozhevniko

Oct 5

Jupyter Notebooks on the Open Internet: 408,240 Body Matches

#zoomeye #attacksurface #exposure

2 min read

kozhevniko

Oct 4

Why vul.cve Returns Zero for CVE-2026-96365: Reading Exposure Data Honestly

#security #drupal #cve202696365 #zoomeye

2 min read

kozhevniko

Oct 4

Triage Order After a Credential-Exposure Advisory: What to Fix First on Fortinet Edge Devices

#security #fortinet #credentialexposure #zoomeye

6 min read

kozhevniko

Oct 4

One Console, Every Firewall: What Cisco FMC CVE-2026-20079 Teaches About Management-Plane Risk

#security #vulnerabilitymanagement #networksecurity

4 min read

kozhevniko

Oct 4

Hardening SSH Against Brute Force with Fail2ban and Rate Limiting

#ssh #hardening #linux #bruteforce

6 min read

kozhevniko

Oct 4

Windows AppContainer: a sandbox that depends on how the application is written

#securityengineering

3 min read

kozhevniko

Oct 4

What the CISA KEV Listing for CVE-2026-104286 Tells Defenders

#vulnerability #fortinet #fortimail #cve2026104286

2 min read

kozhevniko

Oct 3

Dot-Form Header Aliases: How Traefik ForwardAuth Identity Spoofing Reached Backends Before 2.11.56

#security #web #authentication #reverseproxy

3 min read

kozhevniko

Oct 3

MFP Web Management Interfaces and CVE-2026-78249: Why Reachability Decides the Risk

#vulnerability #pathtraversal #mfp #printing

3 min read

1 Week Community Wellness Streak

Writing Debut

Want to connect with kozhevniko?