Tag:cybersecurity
All the articles with the tag "cybersecurity". Filter by keyword.
Security Thursdays by yisusvii — 2026-10-15
Security Thursdays 2026-10-15 — research window Oct 8–14: PraisonAI agent RCE train, Handlebars AST injection bypass, fast-jwt incomplete alg-confusion patch, Argo CD SSH proxy injection, .NET/Kestrel criticals, Cisco Secure Email, and govulncheck.
Security Thursdays by yisusvii — 2026-10-08
Security Thursdays 2026-10-08 — research window Oct 1–7: Payload CMS RCE/SQLi train, Langflow and Flowise agent RCE, Ghost bookmark RCE, Backstage TechDocs/Scaffolder, vm2 and proxy-addr, Next.js 16.3.8 SSRF/cache fixes, and Syft.
Security Checklist for Your Home Linux Workstation Exposed to the Internet
More people are running home mini-servers — Raspberry Pis, mini PCs with Ubuntu — exposed to the internet as personal workspaces. This post covers how secure that really is, a practical hardening checklist, and a script that automates user permissions, firewall, and SSH lockdown.
Security Thursdays by yisusvii — 2026-10-01
Security Thursdays 2026-10-01 — research window Sep 24–30: Next.js next/og ImageResponse RCE, Fastify auth and validation bypass cluster, Axios 1.20.0 SSRF and gadget train, PyJWT algorithm-confusion advisories, Podman host-env leak, and Grype.
Security Thursdays by yisusvii — 2026-09-24
Security Thursdays 2026-09-24 — research window Sep 17–23: mcp-atlassian HTTP auth and file-read cluster, KubeEdge edge RCE jobs, OpenBao recovery-token timing leak, Moquette MQTT ACL bypass, EvilTokens device-code phishing, and Trivy.
Security Thursdays by yisusvii — 2026-09-17
Security Thursdays 2026-09-17 — research window Sep 10–16: Traefik edge bypass cluster, rclone serve auth failures, MCP server exposure (MySQL MCP, mcp-gitlab), Prowler SAML cross-tenant ATO, ZITADEL token exchange, http4s Ember smuggling, and Checkov.
Security Thursdays by yisusvii — 2026-09-10
Security Thursdays 2026-09-10 — research window Sep 3–9: Gitea diffpatch RCE, Semaphore git_url command injection, Next.js/Astro image-opt RCE, MsQuic UAF, GitPython config rewrite RCE, Predis pipeline smuggling, and TruffleHog.
Security Thursdays by yisusvii — 2026-09-04
Security Thursdays 2026-09-04 — research window Aug 28–Sep 3: SeaweedFS unauth IAM, Orval import-time RCE, pnpm install path escapes, NLTK incomplete fixes, fast-uri SSRF, OpenChoreo gateway exposure, and OSV-Scanner.
Security Thursdays by yisusvii — 2026-08-27
Security Thursdays 2026-08-27 — research window Aug 20–26: Apache Tomcat auth/constraint CVEs, Chrome 152 sandbox escapes, pantheon-agents PyPI malware, Camel GHSA wave, asyncssh SCP fix, and gosec v2.29.0.