kozhevniko

Stay curious, keep researching.

Joined on Sep 15, 2026

kozhevniko

Sep 19

Rotating Secrets After an AI-Tooling Compromise: A Checklist for the September 2026 KEV Wave

#security #incidentresponse

3 min read

Want to connect with kozhevniko?

Create an account to connect with kozhevniko. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

kozhevniko

Sep 19

Eight Million RouterOS Devices: Sizing the MikroTik Chained-Exploitation Problem from Measurement Data

#security #routersecurity #zoomeye

3 min read

kozhevniko

Sep 19

Defending Cisco Secure Email Gateway Against CVE-2026-76442: What to Check Before and After the Patch

#security #vulnerability #cisco #cve202676442

3 min read

kozhevniko

Sep 18

The AI Gateway Becomes a Target: Measuring LiteLLM and Kestra Exposure

#zoomeye #aisecurity #litellm #kestra

3 min read

kozhevniko

Sep 18

Using CISA KEV Deadlines as a Triage Clock for Vulnerability Backlogs

#security #vulnerabilitymanagement

2 min read

kozhevniko

Sep 18

Exposed Industrial Controllers: What ZoomEye Data Says About Internet-Facing PLCs

#zoomeye #otsecurity #ics #exposure

3 min read

kozhevniko

Sep 18

Proxmox VE Exposure: Why the Port 8006 Count Is Not the Number That Matters

#zoomeye #exposuremanagement #proxmox #virtualization

4 min read

kozhevniko

Sep 18

Edge Appliances Are Now the Control Plane: What the SonicWall SMA1000 Zero-Day Chain Teaches Defenders

#cybersecurity #edgesecurity #vulnerabilitymanagement #vpn

3 min read

kozhevniko

Sep 18

CVE-2026-76423: The Cisco ISE REST API Flaw That Hands Out Admin Without a Password

#cisco #ise #cve202676423 #authenticationbypass

4 min read

kozhevniko

Sep 17

Prioritizing Cisco's September Firewall Fixes: A Risk-Based Reading of 18 CVEs

#cisco #cve202620324 #patchprioritization #cvss

2 min read

kozhevniko

Sep 17

Jenkins Controller Compromise Is a Supply Chain Event: Lessons from 20 Plugin Flaws

#security #jenkins #supplychain #cicd

4 min read

kozhevniko

Sep 17

Exposure Is Not a One-Time Finding: Monitoring Industrial Protocol Reachability After the CISA PLC Alert

#cybersecurity #monitoring #networking #security

4 min read

kozhevniko

Sep 17

3,988 Hypervisor Consoles on the Open Internet: What ZoomEye Shows About Exposed Proxmox VE Management

#zoomeye #internetmeasurement #virtualization #attacksurface

3 min read

kozhevniko

Sep 17

The Bug That Sat Fixed for Three Years: Proxmox VE's Authentication Bypass and the Cost of Unsupported Hypervisors

#cybersecurity #virtualization #authentication #patchmanagement

3 min read

kozhevniko

Sep 17

Print Servers Are Still Domain-Connected Servers: Lessons from the PaperCut Pre-Authentication RCE Chain

#cybersecurity #printinfrastructure #remotecodeexecution #patching

3 min read

kozhevniko

Sep 17

Identity-First Remote Access for OT Networks: Replacing Flat VPNs Without Stopping the Plant

#otsecurity #ics #zerotrust #remoteaccess

3 min read

kozhevniko

Sep 17

Citrix NetScaler SAML Authentication Bypass: Why CVE-2026-19490 Turns a Gateway Into an Open Door

#security #vulnerability #citrix #netscaler

4 min read

kozhevniko

Sep 17

Why a 2016 KGUARD DVR service is still handing out root to strangers

#vulnerability #iot #kguard #cve202687827

3 min read

kozhevniko

Sep 17

17,877 Artifact Repositories on the Internet: Mapping the JFrog Artifactory Surface Behind CVE-2026-82329

#security #zoomeye #exposure #artifactory

4 min read

kozhevniko

Sep 17

Self-Hosted CI Runners Are Shared Secrets: Threat Modelling Your Build Infrastructure

#cicd #supplychain #devops #runnersecurity

3 min read

kozhevniko

Sep 17

161,764 Assets on Port 102: Sizing the Industrial Control Surface That AA26-231A Described

#security #zoomeye #exposure #ics

4 min read

kozhevniko

Sep 17

1.8 Million Reachable MongoDB Services: Reading Exposure Numbers Without Overreading Them

#zoomeye #mongodb #exposure #measurementmethodology

3 min read

kozhevniko

Sep 16

Two Ways Into mySCADA myPRO Manager: A Privileged API and an Open SMS Gateway

#vulnerability #ics #myscada #cve202673807

2 min read

kozhevniko

Sep 16

CVE-2026-67277 and the MikroTrick Chain: When Two Flaws Become One Attack

#security #vulnerability #mikrotik #routeros

3 min read

kozhevniko

Sep 16

239,093 NetScaler Deployments in View: Measuring the Citrix Edge After CVE-2026-19490

#security #zoomeye #exposure #netscaler

4 min read

kozhevniko

Sep 16

Starting My Developer Journey on DEV.to

#ai #programming #python

1 min read

DEV Community

kozhevniko

Badges

Writing Debut

Currently learning

Rotating Secrets After an AI-Tooling Compromise: A Checklist for the September 2026 KEV Wave

Want to connect with kozhevniko?

Eight Million RouterOS Devices: Sizing the MikroTik Chained-Exploitation Problem from Measurement Data

Defending Cisco Secure Email Gateway Against CVE-2026-76442: What to Check Before and After the Patch

The AI Gateway Becomes a Target: Measuring LiteLLM and Kestra Exposure

Using CISA KEV Deadlines as a Triage Clock for Vulnerability Backlogs

Exposed Industrial Controllers: What ZoomEye Data Says About Internet-Facing PLCs

Proxmox VE Exposure: Why the Port 8006 Count Is Not the Number That Matters

Edge Appliances Are Now the Control Plane: What the SonicWall SMA1000 Zero-Day Chain Teaches Defenders

CVE-2026-76423: The Cisco ISE REST API Flaw That Hands Out Admin Without a Password

Prioritizing Cisco's September Firewall Fixes: A Risk-Based Reading of 18 CVEs

Jenkins Controller Compromise Is a Supply Chain Event: Lessons from 20 Plugin Flaws

Exposure Is Not a One-Time Finding: Monitoring Industrial Protocol Reachability After the CISA PLC Alert

3,988 Hypervisor Consoles on the Open Internet: What ZoomEye Shows About Exposed Proxmox VE Management

The Bug That Sat Fixed for Three Years: Proxmox VE's Authentication Bypass and the Cost of Unsupported Hypervisors

Print Servers Are Still Domain-Connected Servers: Lessons from the PaperCut Pre-Authentication RCE Chain

Identity-First Remote Access for OT Networks: Replacing Flat VPNs Without Stopping the Plant

Citrix NetScaler SAML Authentication Bypass: Why CVE-2026-19490 Turns a Gateway Into an Open Door

Why a 2016 KGUARD DVR service is still handing out root to strangers

17,877 Artifact Repositories on the Internet: Mapping the JFrog Artifactory Surface Behind CVE-2026-82329

Self-Hosted CI Runners Are Shared Secrets: Threat Modelling Your Build Infrastructure

161,764 Assets on Port 102: Sizing the Industrial Control Surface That AA26-231A Described

1.8 Million Reachable MongoDB Services: Reading Exposure Numbers Without Overreading Them

Two Ways Into mySCADA myPRO Manager: A Privileged API and an Open SMS Gateway

CVE-2026-67277 and the MikroTrick Chain: When Two Flaws Become One Attack

239,093 NetScaler Deployments in View: Measuring the Citrix Edge After CVE-2026-19490

Starting My Developer Journey on DEV.to