SorrelThorncroft

Network security enthusiast. Focus on infrastructure hardening, log analysis and defensive tradecraft. Learning continuously, documenting practical notes and thoughts on defensive security.

Joined on Oct 15, 2026

SorrelThorncroft

Oct 22

Threat Modelling the Insider Path in CVE-2026-0313

#vulnerability #cortexxsoar #cve20260313

3 min read

Want to connect with SorrelThorncroft?

Create an account to connect with SorrelThorncroft. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

SorrelThorncroft

Oct 22

56 million PHP and 5.5 million Node.js fingerprints: why a huge base cannot tell you who is exploitable

#zoomeye #php #node #php2shell

4 min read

SorrelThorncroft

Oct 22

CVE-2026-104286: What FortiMail Adds to the Mail Gateway Exploitation Trend

#vulnerability #emailsecurity #fortinet

3 min read

SorrelThorncroft

Oct 22

Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed

#openvpn #vpn #cve #vulnerabilitymanagement

2 min read

SorrelThorncroft

Oct 21

A First-Hour Playbook for a Refrigeration Controller Alert

#ics #exposuremanagement

2 min read

SorrelThorncroft

Oct 21

Management Plane Exposure and CVE-2026-102037

#security #juniper #junos #srx

2 min read

SorrelThorncroft

Oct 21

Nine Junos Builds, One Flaw: Mapping CVE-2026-33792 to Your Fleet

#assetinventory #juniper #junos #cve202633792

3 min read

SorrelThorncroft

Oct 21

27,288 vCenter and 413,891 ESXi Assets: A Virtualization Management Baseline

#zoomeye #virtualization #exposure

3 min read

SorrelThorncroft

Oct 21

61,676 Bug Bounty Assets and 54 New Assets: Reading Coverage Flags Instead of Inventories

#zoomeye #measurement #governance

3 min read

SorrelThorncroft

Oct 21

284 Million Server Headers Against 313 Million Fingerprints: Two Ways to Count the Same Web Server

#zoomeye #measurement #webinfrastructure

3 min read

SorrelThorncroft

Oct 20

An External Verification Checklist for App-Layer RCE in a File-Sync Stack

#checklist #zoomeye #incidentresponse #cve2026110447

3 min read

SorrelThorncroft

Oct 20

Proving You Patched: Evidence and Audit Trail for CVE-2026-39919

#vulnerability #ghostscript #memorysafety

4 min read

SorrelThorncroft

Oct 20

What an IIS Compromise Would Look Like After CVE-2026-70024

#cybersecurity #infosec #microsoft #security

3 min read

SorrelThorncroft

Oct 20

CVE-2026-104286: FortiMail Path Traversal Under Active Exploitation

#vulnerability #fortinet #fortimail #cve2026104286

4 min read

SorrelThorncroft

Oct 20

Apache mod_vhost_alias Overflow CVE-2026-63292: Exposure, Exploit Conditions and Patching Priorities

#apache #httpd #vulnerability #modvhostalias

2 min read

SorrelThorncroft

Oct 19

N-able N-central CVE-2026-86218: A Pre-Authentication RCE in the Console Managed Service Providers Live In

#nable #ncentral #rmm #preauthrce

3 min read

SorrelThorncroft

Oct 19

Hunting for SQL Injection Abuse in MOVEit Transfer Before the Patch Lands

#vulnerability #moveittransfer #cve202689076

2 min read

SorrelThorncroft

Oct 19

Detecting Abuse of the SPL2 Module Catalog: CVE-2026-76270

#splunk #cve202676270 #sqlinjection #cwe89

2 min read

SorrelThorncroft

Oct 19

Prompt injection is a trust-boundary bug in the retrieval pipeline

#promptinjection #llm #rag #agents

3 min read

SorrelThorncroft

Oct 19

The Patch Window Is Collapsing: What the VMware vCenter Exploitation Timeline Shows

#cybersecurity #virtualization #ransomware #vulnerabilitymanagement

3 min read

SorrelThorncroft

Oct 15

Lab setup tips for practicing network defense at home

#cybersecurity #infrastructure #networking #security

1 min read

DEV Community

SorrelThorncroft

Badges

Writing Debut

Threat Modelling the Insider Path in CVE-2026-0313

Want to connect with SorrelThorncroft?

56 million PHP and 5.5 million Node.js fingerprints: why a huge base cannot tell you who is exploitable

CVE-2026-104286: What FortiMail Adds to the Mail Gateway Exploitation Trend

Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed

A First-Hour Playbook for a Refrigeration Controller Alert

Management Plane Exposure and CVE-2026-102037

Nine Junos Builds, One Flaw: Mapping CVE-2026-33792 to Your Fleet

27,288 vCenter and 413,891 ESXi Assets: A Virtualization Management Baseline

61,676 Bug Bounty Assets and 54 New Assets: Reading Coverage Flags Instead of Inventories

284 Million Server Headers Against 313 Million Fingerprints: Two Ways to Count the Same Web Server

An External Verification Checklist for App-Layer RCE in a File-Sync Stack

Proving You Patched: Evidence and Audit Trail for CVE-2026-39919

What an IIS Compromise Would Look Like After CVE-2026-70024

CVE-2026-104286: FortiMail Path Traversal Under Active Exploitation

Apache mod_vhost_alias Overflow CVE-2026-63292: Exposure, Exploit Conditions and Patching Priorities

N-able N-central CVE-2026-86218: A Pre-Authentication RCE in the Console Managed Service Providers Live In

Hunting for SQL Injection Abuse in MOVEit Transfer Before the Patch Lands

Detecting Abuse of the SPL2 Module Catalog: CVE-2026-76270

Prompt injection is a trust-boundary bug in the retrieval pipeline

The Patch Window Is Collapsing: What the VMware vCenter Exploitation Timeline Shows

Lab setup tips for practicing network defense at home