DEV Community

#incidentresponse

The process of responding to and managing security incidents and breaches.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
When the WAF Host Is Compromised: CVE-2026-106931 and Evidence You Still Own

When the WAF Host Is Compromised: CVE-2026-106931 and Evidence You Still Own

1
Comments
3 min read
Collecting SiteGuard Diagnostic Information Before the CVE-2026-106931 Patch

Collecting SiteGuard Diagnostic Information Before the CVE-2026-106931 Patch

Comments
3 min read
The attacker deleted everything. At 2 a.m., /proc still remembered.

The attacker deleted everything. At 2 a.m., /proc still remembered.

1
Comments 1
4 min read
Opening a Word file got lsass read. Remember 0x1410.

Opening a Word file got lsass read. Remember 0x1410.

Comments
2 min read
Cheap Embeddings and Rerank Alternatives: OpenAI, Cohere, Voyage Semantic Search

Cheap Embeddings and Rerank Alternatives: OpenAI, Cohere, Voyage Semantic Search

Comments
7 min read
AhsayCBS CVE-2026-105133 and CVE-2026-105134: The Backup Server as an Attack Platform

AhsayCBS CVE-2026-105133 and CVE-2026-105134: The Backup Server as an Attack Platform

Comments
3 min read
Recovering a PAN-OS firewall from CVE-2026-0321 maintenance mode

Recovering a PAN-OS firewall from CVE-2026-0321 maintenance mode

Comments
3 min read
Seventy-One Percent in Three Days: What a Fast Exposure Drop Actually Costs

Seventy-One Percent in Three Days: What a Fast Exposure Drop Actually Costs

Comments
4 min read
HTTP2Shell (CVE-2026-111497): WordPress and Next.js exposure

HTTP2Shell (CVE-2026-111497): WordPress and Next.js exposure

1
Comments
11 min read
Replayable Customer Support Speech-to-Text API Intake for MP3/WAV CRM Actions

Replayable Customer Support Speech-to-Text API Intake for MP3/WAV CRM Actions

Comments
8 min read
PHP session upload progress vulnerability after the PHP2Shell patch

PHP session upload progress vulnerability after the PHP2Shell patch

Comments
10 min read
The Appliance Holds the Keys: Credential Blast Radius After a BeyondTrust Compromise

The Appliance Holds the Keys: Credential Blast Radius After a BeyondTrust Compromise

Comments
4 min read
Log wipers get caught by the sound of the wipe

Log wipers get caught by the sound of the wipe

Comments
2 min read
Hunting CVE-2026-114625: What to Look for After the VeloCloud Orchestrator Patch

Hunting CVE-2026-114625: What to Look for After the VeloCloud Orchestrator Patch

Comments
2 min read
When You Cannot Patch VeloCloud Orchestrator Today: A CVE-2026-114625 Playbook

When You Cannot Patch VeloCloud Orchestrator Today: A CVE-2026-114625 Playbook

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.