Two Authentication Failures to Triage Now: SonicWall SSL-VPN and SSHole
See how SonicWall's SAML bypass and the OpenSSH/musl password bug work, what their patches change, and how to verify the fixes.
Threat Intelligence & Analysis
Offensive thinking.
Offensive thinking.
Defensive expertise.
In-depth red team tactics, blue team strategy — and privacy-first security tools that run entirely in your browser. No accounts. No telemetry. No data leaves your machine.
Featured
Latest analysis
Archive
Recent posts
LLMJacking: Detect Stolen AI Access Before the Bill Arrives
Mandiant's 2026 cases show how stolen cloud credentials become unauthorized AI usage. Trace the activity, contain access, and limit the cost.
Android’s November Patch: Verify the Fix for CVE-2026-58868
Google patched a critical Android flaw that could allow remote code execution without user interaction. Check the security patch level and verify the fix.
Why Google's Android Developer Verification Mandate Faces Opposition
Google says mandatory developer identity checks will deter Android malware. Critics warn that the global mandate creates security and censorship risks.
Binance Is Reopening After a $6.3B Theft. Recovery Is Not Remediation
Binance has resumed withdrawals, replaced 95% of affected assets, and received an FBI attribution. None of that yet explains or closes the original breach path.
Linux CVE-2026-98432: Check the Running Kernel, Not Just the Update Screen
A remotely reachable Linux TCP flaw can crash a server and has been demonstrated as root code execution with MPTCP. Here is how to assess exposure, patch, reboot, and verify the result.
GitLab CVE-2026-85706: Patch the File Read, Then Rotate What It Exposed
CISA lists GitLab CVE-2026-85706 as exploited. Self-managed administrators must patch, hunt the repository commits API, and treat readable secrets as potentially compromised.