Tag archive
A lifecycle view of the October 2026 KEV wave, with metrics that predict exposure better than patch compliance.
CVE-2026-10520 is a command injection flaw in Ivanti Sentry that FortiGuard Labs continued to see exploited after technical details went public.
Defensive analysis grounded in vendor advisories and independent research.
Why remote access appliances are reachable by design, what the OpenVPN and Ivanti Connect Secure fingerprint counts do and do not prove, and which surfaces alongside the VPN endpoint carry the real risk.
2,317,463 fingerprint matches for an open source router firmware that now sits at the edge of many corporate networks. What an organization can control when the perimeter is in a living room.
A ZoomEye fingerprint count of internet-visible pfSense deployments, why a firewall management plane is a high-value target, and the placement decisions that keep remote access without publishing the console.
The September 2026 KEV wave as an operations dataset, not a news cycle A single exploited...
A worked example showing how query selection changes an exposure count by orders of magnitude, using the SonicWall SMA1000 vulnerabilities.
A four-phase structure for responding to pre-authentication edge-device flaws on a days-long timeline, including compensating controls and post-change verification.
How the SonicWall SMA1000 SSRF and command-injection chain shows why edge appliance patch windows and management-plane exposure matter more than vendor-wide asset counts.
Analysis of the SonicWall SMA1000 zero-day chain (CVE-2026-83548 and CVE-2026-83549) and what it reveals about securing edge appliances.
How to use ZoomEye fingerprint queries to measure internet exposure of access gateways, and how to read the resulting numbers responsibly.