StarkMan - DEV Community

StarkMan

Oct 10

A Date Filter Is Not an Install Date: Reading Time-Bounded Exposure Queries

#5g #exposuremanagement #zoomeye #networksecurity

2 min read

StarkMan

Oct 10

Internal certificate authorities fail on lifecycle, not on cryptography

#pki #certificatelifecycle #internalca #availability

4 min read

StarkMan

Oct 10

What a database port count does and does not tell you

#zoomeye #attacksurface #database #measurement

1

3 min read

StarkMan

Oct 10

Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460

#cisco #ise #apisecurity #authentication

3 min read

StarkMan

Oct 10

Build Agents and Developer Workstations: The Docker Bind That Leaks Into Production

#docker #cicd #exposure #zoomeye

1

2 min read

StarkMan

Oct 10

SNI, Host headers and the limits of name-based virtual hosting: CVE-2026-102795 explained

#vulnerability #apachetrafficserver #accesscontrol

2 min read

StarkMan

Oct 9

Cloud IAM: Reading a Policy Before You Trust It

#cloudsecurity #iam #leastprivilege #policyreview

2 min read

StarkMan

Oct 9

CVE-2026-100727: unauthenticated file read in GROWI's local upload mode

#cybersecurity #infosec #security

3 min read

StarkMan

Oct 9

OpenWrt: 2,317,463 Fingerprint Matches Where the Home Router Becomes the Edge

#openwrt #router #remotework #edgesecurity

2 min read

StarkMan

Oct 9

17,884 Artifactory Matches and 400 Title Matches: Why Query Choice Changes the Answer

#security #exposuremanagement #supplychain

3 min read

StarkMan

Oct 9

pfSense: 446,010 Fingerprint Matches on the Edge of the Network

#pfsense #firewall #edgesecurity #managementplane

3 min read

StarkMan

Oct 9

CVE-2026-96358: What Remote Exploitability Means for a Drupal Extension Flaw

#security #drupal #cve #vulnerability

1

2 min read

StarkMan

Oct 8

Cluster State Tampering: The Operational Risk of Unauthenticated Znode Deletion

#apachezookeeper #vulnerability #cve202659739 #distributedsystems

1 min read

StarkMan

Oct 8

Detection Engineering Starts With the Logs You Decided to Keep

#detectionengineering #logging #monitoring #incidentresponse

2 min read

StarkMan

Oct 8

Recursive Parsers and Stack Limits: The Design Lesson Behind CVE-2026-103552

#architecture #cybersecurity #security

2 min read

StarkMan

Oct 8

Cisco Secure Email Gateway CVE-2026-76442: Quantity Validation Flaw That Turns a Number Field Into a Denial-of-Service Switch

#security #vulnerability #cisco #cve202676442

5 min read

StarkMan

Oct 8

Third Parties in the Incident Path: The Response Plan Gap CISA Documented

#security #geoserver #cve202436401 #attacksurface

3 min read

StarkMan

Oct 8

Admission Control in Kubernetes: Where Policy Actually Gets Enforced

#kubernetes #policy #containersecurity

3 min read

StarkMan

Oct 7

What a build provenance attestation verifies, and what it leaves open

#supplychain #slsa #intoto #sigstore

4 min read

StarkMan

Oct 7

Designing SOAR Playbooks That Hold Up During a Real Incident

#soar #incidentresponse #automation #playbook

1

3

3 min read

StarkMan

Oct 7

Two Denial-of-Service Vectors in One Apache Round: NiFi and MyFaces Compared

#apachenifi #apachemyfaces #vulnerability #datapipeline

2 min read

StarkMan

Oct 7

Command Injection in Legacy CPE: A Technical Walkthrough of CVE-2026-95675

#security #vulnerability #dlink #commandinjection

2 min read

StarkMan

Oct 7

Harbor at 57,117 observed hosts: the registry that supplies every container you run

#zoomeye #registry #supplychain #exposure

2 min read

StarkMan

Oct 7

Apache Impala at 3,694 fingerprints: a query engine that runs with the warehouse's permissions

#zoomeye #dataplatform #accesscontrol

2 min read

StarkMan

Oct 6

Docker Sandboxes CVE-2026-77179 and CVE-2026-79994: when the agent VM can still reach the host

#security #vulnerability #sandbox #docker

3 min read

StarkMan

Oct 6

CVE-2026-103877 risk assessment: scoring the LDAP API deserialization flaw against your real attack surface

#security #vulnerability #apache #ldap

2 min read

StarkMan

Oct 6

CVE-2026-88772: a DTLS memory overflow in Citrix NetScaler ADC and Gateway is being exploited now

#security #vulnerability #citrix #netscaler

5 min read

StarkMan

Oct 6

Chat Front Ends Are the Quiet Part of AI Exposure: 90,330 Open WebUI Instances

#security #ai #exposure #zoomeye

3 min read

StarkMan

Oct 6

12,251 Metasploit Matches: Mapping the Exploitation-Framework Attack Surface

#threatintelligence #zoomeye #exposuremanagement

2 min read

StarkMan

Oct 6

OpenCTI Case Creation Flaw CVE-2026-76822: A Permission Model Postmortem

#cybersecurity #infosec #opensource #security

2 min read

StarkMan

Oct 5

MCP Atlassian Falls Back to Operator Credentials When No Identity Is Present

#mcp #atlassian #jira #confluence

1

3 min read

StarkMan

Oct 5

Langflow OSS against the rest of NCSC-2026-0392: ranking twelve fixes by real urgency

#vulnerability #langflow #ibm #remotecodeexecution

2 min read

StarkMan

Oct 5

CVE-2026-86326 in the Plant Network: What Persistent Unsigned Firmware Does to Operations

#otsecurity #moxamgate #industrialnetworks #firmwareintegrity

2 min read

StarkMan

Oct 5

NTP: 19,066,332 Service Matches, 3,241,380 of Them in the United States

#zoomeye #ntp #time #exposuremeasurement

3 min read

StarkMan

Oct 5

Session Hijacking as a Beachhead: CVE-2026-102489 and the Zammad Root Chain

#vulnerability #zammad #cve2026102490 #helpdesk

2 min read

StarkMan

Oct 5

CVE-2026-96361 in Context: How This Drupal Batch Compares with Core Security Releases

#security #drupal #cve202696361 #maintenance

2 min read

StarkMan

Oct 4

Cross-Site Scripting in Drupal Extensions: The Quiet Half of WID-SEC-2026-3554

#security #drupal #vulnerability

1

2 min read

StarkMan

Oct 4

11010 RDP and 176914 VNC Results: Two Remote-Access Protocols With Different Histories

#zoomeye #remoteaccess #rdp #vnc

4 min read

StarkMan

Oct 4

SeaweedFS and the Object Store You Forgot You Deployed: 6,345 Matches

#zoomeye #exposuremeasurement #objectstorage #inventory

2 min read

StarkMan

Oct 4

Cisco FMC CVE-2026-20079: a CVSS 10.0 management-plane bypass and the clusters behind it

#cisco #firewall #managementplane #cve202620079

4 min read

StarkMan

Oct 4

AI Agents as Intruders: What the JadePuffer Azure Cases Change About Incident Response

#security #cloud #identity #aiagents

2 min read

StarkMan

Oct 4

Pgpool-II 3.5.x through 4.2.x: the branches that will not be patched

#security #postgres #pgpool #cve

3 min read

StarkMan

Oct 3

CVE-2026-63292 Timeline and Technical Anatomy: An Apache mod_vhost_alias Buffer Overflow

#apache #httpd #vulnerability #modvhostalias

1

2 min read

StarkMan

Oct 3

Telnet, SSH and Port 8080: Identifying the Device Layer Where Payloads Hide

#securityevent #crypter #malwareevasion #assetidentification

3 min read

StarkMan

Oct 3

Adobe Connect Android App 4.5: The Mobile Half of APSB26-150

#adobeconnect #android #mobilepatching #cve202675682

2 min read

StarkMan

Oct 3

Detecting Data Exfiltration Over DNS: Signals That Survive Encrypted Transport

#security #defensivepractice

3 min read

StarkMan

Oct 3

Choosing Between rsync and btrfs receive in LXD: Exposure Differences Under CVE-2026-87799

#security #vulnerability #lxd #cve202687799

3 min read

StarkMan

Oct 3

Field-level encryption: choosing the layer that has to hold

#encryption #dataprotection #keymanagement

2 min read

StarkMan

Oct 2

Why CISA gave agencies three days to patch CVE-2026-7273 in Zyxel GS1900 switches

#cybersecurity #infosec #networking #security

4 min read

StarkMan

Oct 2

55,812 SonicWall SSL-VPN Assets on HTTP and the Management Plane Problem

#zoomeye #sonicwall #sma1000 #sslvpn

2 min read

StarkMan

Oct 2

Edge Appliances Keep Being Targeted: Where CVE-2026-88774 Fits

#security #citrix #netscaler #cve202688774

3 min read

StarkMan

Oct 2

Reading CVE-2026-96364 in the September 2026 Drupal contributed-module batch

#security #drupal #cve202696364 #contributedmodules

1

4 min read

StarkMan

Oct 2

Measuring NetScaler exposure: what a 239,277-asset count does and does not tell you about CVE-2026-88771

#zoomeye #exposure #citrix #netscaler

1

2 min read

StarkMan

Oct 2

CVE-2026-96355: Six Impact Classes, Only One of Which Is a Defacement Problem

#security #vulnerability #drupal #cms

5 min read

StarkMan

Oct 1

What Discloses From GitLab EE CVE-2026-87719: Advanced Search Configuration and Credentials

#security #vulnerability #gitlab #cve202687719

1

2 min read

StarkMan

Oct 1

Detecting Trouble from CVE-2026-88775 When No Trigger Is Public

#security #vulnerability #citrix #netscaler

3 min read

StarkMan

Oct 1

Why "Zimbra Web Client" Appears Half a Million Times and Almost None of It Is a Mail Server

#zimbra #cve202566376 #exposuremanagement #zoomeye

3 min read

StarkMan

Oct 1

Why CVE-2026-77762 Shows a Vendor Low Rating and a Third-Party 8.1 Score

#apachetomcat #cve202677762 #cvss #riskscoring

2 min read

StarkMan

Oct 1

Default Credentials on Exposed VPN and SSH Gateways: The Gunra Path With the Faintest Audit Trail

#cybersecurity #infosec #security

3 min read

StarkMan

Oct 1

CVE-2026-96362 and the Limits of Version-Based Drupal Scanning

#security #drupal #vulnerability #cve202696362

3 min read

One Year Club

1 Week Community Wellness Streak

Writing Debut

Want to connect with StarkMan?