Reflexive Access List
Some of my readers commented on my old article about reflexive access-list with issues in the configuration. I tried it in the lab again to be sure I didn’t make…
-
-
wp2shell: WordPress Core Pre-Auth RCE FAQ
An unauthenticated attacker can chain two WordPress Core vulnerabilities, CVE-2026-63030 and CVE-2026-60137, to achieve remote code execution against affected WordPress installations. Multiple security firms have confirmed active in-the-wild exploitation within…
-
Introducing the LBC Ingress-to-Gateway API migration toolkit
Migrating your AWS Load Balancer Controller (LBC) Ingress resources to the Gateway API by hand is tedious and error prone. You need to rewrite annotations, path rules, and TLS configuration,…
-
Beyond performance monitoring: Understand the user experience with Grafana Cloud Frontend Observability
You’ve optimized your Largest Contentful Paint. Your Time to First Byte is under 200ms. Your Lighthouse scores are green. And yet, your checkout conversion rate is quietly dropping. A segment…
-
20th July – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 20th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Ernst & Young, a global accounting and…
-
Interrogate your Kubernetes topology graph with Dynatrace
A hands-on guide to Dynatrace Smartscape on Grail for SREs — impact radius, ownership, and incident scope in three DQL queries. Dynatrace Smartscape on Grail models your entire Kubernetes environment…
-
How to Hack Wi-Fi: Build a Software-Based Wi-Fi Jammer with Airgeddon :: Null Byte
Airgeddon is a multi-Bash network auditor capable of Wi-Fi jamming. This capability lets you target and disconnect devices from a wireless network, all without joining it. It runs on Kali,…
-
Monitoring from the user’s perspective
For years, organizations have relied on Application Performance Monitoring (APM) as the backbone of their observability strategy. The idea was simple: collect as many logs, metrics, and traces as possible,…
-
Cato CTRL™ Threat Brief: AsyncAPI Supply Chain Attack Delivers Miasma Malware Through Trusted npm Packages
Executive Summary On July 14, 2026, attackers compromised release processes connected to the AsyncAPI open- source project and published malicious versions of four widely used npm packages with a combined…
-
MACSec – Media Access Control Security
UPDATE on 11 Jul 2019: I wrote a fresh article describing how to implement MACSec on Cisco devices in the simplest way possible. I think that one is maybe what…
