Cybersecurity

I shipped an unauthenticated RCE in my own port scanner — here's the whole chain, and how I killed it

I built a web front end for an Nmap-based port scanner: a FastAPI backend, a React dashboard, backgr…

CVE-2026-35366: CVE-2026-35366: Security Inspection Bypass in uutils coreutils printenv via non-UTF-8 Environment Variables

CVE-2026-35366: Security Inspection Bypass in uutils coreutils printenv via non-UTF-8 Environment Va…

How to Create Strong Passwords (and Why Length Beats Complexity)

For years we were all trained to build passwords like "P@ssw0rd!" — a capital letter, a number, a sy…

GHSA-X76W-8C62-48MG: GHSA-X76W-8C62-48MG: Missing Authorization in Craft CMS AssetsController Leads to Private Asset Disclosure

GHSA-X76W-8C62-48MG: Missing Authorization in Craft CMS AssetsController Leads to Private Asset Disc…

Phishing poses as big-brand job interview to steal Google accounts

A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-…

Fake IT support calls on Microsoft Teams push EtherRAT malware

Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to…

CVE-2026-35371: CVE-2026-35371: Logical Identity Spoofing in uutils coreutils id Utility

CVE-2026-35371: Logical Identity Spoofing in uutils coreutils id Utility Vulnerability ID: CVE-20…

MCP STDIO: The Command Runs Before the Server Is Trusted

If you are building AI agents with MCP, there is one detail about STDIO transport that is easy to mi…

16-Year-Old Linux KVM Bug 'Januscape' Lets a Guest VM Take Down the Host on Intel and AMD

TL;DR what: A use-after-free in Linux KVM's shadow-page code (CVE-2026-53359, 'Januscape') lets …

CVE-2026-35339: CVE-2026-35339: Incorrect Exit Status Propagation in Rust uutils/coreutils chmod Recursive Execution

CVE-2026-35339: Incorrect Exit Status Propagation in Rust uutils/coreutils chmod Recursive Execution…

Implementing BIMI Records: A Step-by-Step Technical Guide to Display Your Brand Logo in the Inbox

Implementing BIMI Records: A Step-by-Step Technical Guide to Display Your Brand Logo in the Inbox …

Introducing the Secure Code Review Challenge (Practice Real-World Reviews)

📢 I have some exciting news: I'm launching a new series called the Secure Code Review Challenge. Che…