OnaEiuspkz - DEV Community

OnaEiuspkz

Sep 23

1,539 Jenkins Matches and 212 GitLab Matches: Measuring CI/CD Controllers as an Attack Surface

#zoomeye #jenkins #gitlab #cicd

3 min read

OnaEiuspkz

Sep 23

What Exposure Counts Do Not Prove: A Methodology Note on the Fortinet Credential Advisory

#security #fortinet #credentialexposure #zoomeye

5 min read

OnaEiuspkz

Sep 23

CVE-2026-76443 and the Injection Risk in Email Security Appliances

#security #vulnerability #cisco #cve202676443

2 min read

OnaEiuspkz

Sep 23

AI Gateways on the Public Internet: 35,130 Indexed LiteLLM Endpoints and the Credentials Behind Them

#security #aiinfrastructure #exposuremanagement #zoomeye

3 min read

OnaEiuspkz

Sep 23

Why Exposed Build Servers Remain the Quietest Way Into a Software Supply Chain

#cicd #supplychain #vulnerabilitymanagement

3 min read

OnaEiuspkz

Sep 22

Defending DIR-822A Deployments Against CVE-2026-86510 Without a Vendor Patch

#security #vulnerability #router #dlink

2 min read

OnaEiuspkz

Sep 22

When a CVE Query Returns Zero: Interpreting ZoomEye's vul.cve Field Correctly

#exposuremanagement #internetmeasurement #methodology #zoomeye

4 min read

OnaEiuspkz

Sep 22

Lessons From CVE-2026-93952: Securing SD-WAN Controllers Before the Next Zero-Day

#security #lessonslearned #sdwan #velocloud

3 min read

OnaEiuspkz

Sep 22

ISC BIND's September 2026 Patch Batch: 14 CVEs, One DNS Server, and a Wide Blast Radius

#dns #iscbind #vulnerability #denialofservice

5 min read

OnaEiuspkz

Sep 22

Building a Patch Prioritization Rule When a Single Vendor Ships 970 Fixes in a Month

#patchmanagement #vulnerabilityprioritization #kev #securityoperations

4 min read

OnaEiuspkz

Sep 22

Logging and Detection: Why Most Breaches Are Found by Someone Else

#detection #logging #incidentresponse

1

2 min read

OnaEiuspkz

Sep 21

Crypto Inventory Before Cryptography Change: A Practical Post-Quantum Migration Start

#postquantum #cryptography #assetinventory #migration

4 min read

OnaEiuspkz

Sep 21

Measuring leaked .env configuration files on the open web

#cybersecurity #infosec #security

5 min read

OnaEiuspkz

Sep 21

ConnectWise ScreenConnect CVE-2026-84869: Remote Support Software as an Attacker Delivery Channel

#rmmabuse #missingauthorization #remotesupport #endpointsecurity

3 min read

OnaEiuspkz

Sep 21

When the VPN Gateway Becomes the Foothold: Lessons from the SonicWall SMA1000 Zero-Day Chain

#vulnerabilitymanagement #edgesecurity #vpn #zeroday

4 min read

OnaEiuspkz

Sep 21

17,881 Artifactory Instances Are Observable Online: Turning the CVE-2026-82329 KEV Deadline into a Checkable Query

#security #supplychain #kev #artifactory

3 min read

OnaEiuspkz

Sep 21

Exposed Router Management: 8.09 Million RouterOS Assets and the 9,560 That Still Answer on SSH

#security #exposuremanagement #networksecurity #zoomeye

3 min read

OnaEiuspkz

Sep 20

GitLab CVE-2026-85706: Why the Patch Is Only Step One

#gitlab #cve202685706 #pathtraversal #supplychain

4 min read

OnaEiuspkz

Sep 20

From Unauthenticated RCE to Ransomware: The vCenter Syslog Flaw That Reached 47 Countries

#security #vulnerability #virtualization #ransomware

3 min read

OnaEiuspkz

Sep 20

The September 2026 KEV Wave: Reading Exposure Across Six Exploited Products

#zoomeye #exposuremanagement #cisakev #vulnerabilitymanagement

4 min read

OnaEiuspkz

Sep 20

9,941 Reachable N-central Interfaces: Sizing the RMM Surface Behind CVE-2026-86218

#zoomeye #exposure #rmm #internetmeasurement

4 min read

OnaEiuspkz

Sep 20

Securing Check Point Security Management and Log Servers Against CVE-2026-91843

#security #vulnerability #checkpoint #remotecodeexecution

1 min read

OnaEiuspkz

Sep 19

Measuring the MikroTik Attack Surface Behind the MikroTrick Campaign

#cybersecurity #attacksurface #zoomeye

3 min read

OnaEiuspkz

Sep 19

Detecting CVE-2026-86060 Exploitation Attempts in MikroTik RouterOS SSH Logs

#security #vulnerability #mikrotik #routeros

2 min read

OnaEiuspkz

Sep 19

SonicWall SMA 1000 Remains a Small but Critical Edge Exposure After September's KEV Additions

#security #attacksurface #vpn #kev

4 min read

OnaEiuspkz

Sep 19

Reading AA26-231A as an Asset-Exposure Problem, Not a Patch Problem

#ics #otsecurity #assetexposure #cisaadvisory

4 min read

OnaEiuspkz

Sep 19

The Cisco FMC Authentication Bypass Shows Why Management Planes Are the Real Perimeter

#cybersecurity #vulnerabilitymanagement #networksecurity

4 min read

OnaEiuspkz

Sep 19

Redis, MySQL and PostgreSQL on the Open Internet: 529,000 Reachable Database Ports

#zoomeye #databasesecurity #exposuremeasurement #redis

3 min read

OnaEiuspkz

Sep 18

What a resource lifetime flaw actually is, using CVE-2026-20353 as the example

#security #vulnerability #cisco #emailsecurity

3 min read

OnaEiuspkz

Sep 18

From path traversal to denial of service: the full CVE set behind Cisco's email gateway patch

#security #vulnerability #cisco #emailsecurity

2 min read

OnaEiuspkz

Sep 18

What CVE-2026-76441 Reveals About Access Control in Email Security Appliances

#security #vulnerability #cisco #architecture

3 min read

OnaEiuspkz

Sep 18

The September 2026 Patch Tuesday Record: What 974 CVEs Means for Triage

#patchmanagement #microsoft #vulnerabilitytriage

4 min read

OnaEiuspkz

Sep 17

174 Unauthenticated Docker Daemons: Why a Small Number Is Still Worth Acting On

#zoomeye #internetmeasurement #containersecurity #docker

3 min read

OnaEiuspkz

Sep 17

Hunting the Cisco ISE Authentication Bypass: Detection and Response for CVE-2026-76423

#cisco #ise #cve202676423 #detection

4 min read

OnaEiuspkz

Sep 17

Measuring the Check Point VPN exposure: what internet scanning shows after CVE-2026-85102 and CVE-2026-85103

#security #checkpoint #vpn #cve

2 min read

OnaEiuspkz

Sep 17

Exposure Check: What the Cisco Secure Firewall Patch Wave Means for Internet-Facing Edge Devices

#cisco #cve202620324 #exposure #attacksurface

2 min read

OnaEiuspkz

Sep 17

Why Groovy Compile-Time Annotations Break the Jenkins Script Security Sandbox

#security #jenkins #groovy #sandbox

4 min read

OnaEiuspkz

Sep 17

Finding the Exposed Controllers: Using ZoomEye to Locate Internet-Reachable EtherNet/IP Assets

#cybersecurity #iot #security

5 min read

OnaEiuspkz

Sep 17

Modbus and S7 on the Public Internet: 202,686 Reachable Industrial Ports and What They Actually Expose

#zoomeye #ics #modbus #s7

4 min read

OnaEiuspkz

Sep 16

Stolen OAuth Tokens Outlive Password Resets: Hardening Session Material in SaaS Estates

#identity #oauth #saassecurity #incidentresponse

3 min read

OnaEiuspkz

Sep 16

Binding to 0.0.0.0: the design decision behind CVE-2026-87827

#vulnerability #iot #kguard #cve202687827

2 min read

OnaEiuspkz

Sep 16

mySCADA myPRO Manager: Two Missing-Authorization Flaws in an ICS Management Platform (Operational View)

#vulnerability #ics #myscada #cve202673807

2 min read

OnaEiuspkz

Sep 16

CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization

#security #vulnerability #starlette #fastapi

4 min read

OnaEiuspkz

Sep 16

The Advisory That Was Not a Patch: Reading AA26-231A and the AI-Assisted Reconnaissance of Siemens S7 PLCs

#security #ics #otsecurity #siemens

5 min read

OnaEiuspkz

Sep 16

How I Understand Modern AI as a Developer

#ai #developer #productivity #softwaredevelopment

2

1 min read

OnaEiuspkz

Sep 16

My First Technical Note on DEV.to

1 min read

Want to connect with OnaEiuspkz?