Cybersecurity

Windows Server 2022 reaches end of mainstream support next month

Microsoft has reminded customers that Windows Server 2022 will reach the end of mainstream support n…

CARTE & OAOTC

I can't decide what I should chose. My company pays me a cert for cloud pentesting. Since I did two …

CVE-2026-69201: CVE-2026-69201: Path Traversal and Directory Escape in http4s Static Content Services

CVE-2026-69201: Path Traversal and Directory Escape in http4s Static Content Services Vulnerabili…

Why Most SOCs Alert on the Wrong Things (and How to Fix It)

If you've worked inside a Security Operations Center for more than a few months, you already know th…

CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization

CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization …

MikroTik RouterOS CVE-2026-67277: A Defender's Detection and Response Playbook

MikroTik RouterOS CVE-2026-67277: A Defender's Detection and Response Playbook By the time a vendo…

CVE-2026-67277 and the MikroTrick Chain: When Two Flaws Become One Attack

CVE-2026-67277 and the MikroTrick Chain: When Two Flaws Become One Attack Security advisories usua…

MikroTrick, Part One: How CVE-2026-67277 Breaks RouterOS Authentication

MikroTrick, Part One: How CVE-2026-67277 Breaks RouterOS Authentication A router that authenticate…

Why CVE-2026-67277 Reached the CISA KEV Catalog So Fast

Why CVE-2026-67277 Reached the CISA KEV Catalog So Fast A vulnerability that is disclosed and a vu…

Gas Optimization Audit: OKX

Gas Optimization Audit: OKX Target Protocol: OKX (TVL: $29321.0M) Technical Security & G…

Your Mobile Actions Need an Authorization Test Plan

Mobile teams usually test an action through the interface that exposes it. A user opens the app, sel…

The fingerprint we deliberately do not use to catch referral fraud

We added a referral scheme. Refer someone, they buy something, you get a reward. The reward is grant…