Admin Login

Use code GET10 for 10% off any Linux VPS plan, recurring on every renewal.

Hostija Blog

Hostija BLOG

Insights on offshore hosting, privacy, security and the cloud.

SharePoint Auth Bypass: Why PoC Release Accelerates Real-World Attacks
August 14, 2026 · Hostija

SharePoint Auth Bypass: Why PoC Release Accelerates Real-World Attacks

A critical SharePoint authentication bypass is being actively exploited after PoC code went public. Learn why PoC releases accelerate attacks and how to protect your infrastructure.

Read article →
Lazarus Zero-Day and Defence Sector Targeting: What Infrastructure Teams Should Know
August 13, 2026 · Hostija

Lazarus Zero-Day and Defence Sector Targeting: What Infrastructure Teams Should Know

North Korean threat actor Lazarus has weaponised a Windows zero-day to infiltrate defence and aerospace networks. Infrastructure operators should understand the attack chain and detection strategy.

Read article →
Windows Kernel Driver Zero-Day: What Hosting Operators Need to Know
August 12, 2026 · Hostija

Windows Kernel Driver Zero-Day: What Hosting Operators Need to Know

A Windows kernel driver vulnerability is actively exploited in the wild. We break down the risk to hosted infrastructure and outline immediate mitigation steps.

Read article →
Windows Plug and Play Vulnerability Escalates USB Spoofing to SYSTEM Access
August 11, 2026 · Hostija

Windows Plug and Play Vulnerability Escalates USB Spoofing to SYSTEM Access

Researchers demonstrate how Windows Plug and Play can be abused to achieve SYSTEM-level code execution via spoofed USB devices—with implications for remote infrastructure access.

Read article →
Browser Fingerprinting as a Malware Distribution Gate
August 6, 2026 · Hostija

Browser Fingerprinting as a Malware Distribution Gate

Threat actors now fingerprint visitors before serving malware lures. Learn how this evasion technique works and what it means for infrastructure defenders.

Read article →
Device Code Phishing: How OAuth 2.0's Design Becomes a Bypass Vector
August 5, 2026 · Hostija

Device Code Phishing: How OAuth 2.0's Design Becomes a Bypass Vector

Device code phishing is exploiting a legitimate OAuth 2.0 flow to bypass multi-factor authentication. Here's how it works and what defenders must watch for.

Read article →

Latest Blog Articles
↑
Tor mirror: http://ftc3tp4t6v6kfk3ycghwspsgcsifwharb7zdrsnunokgxcb55aq5jmyd.onion
Client area: http://jqfh7q6ns67y2gz5ho77ftm5oasutt54xq77s4j75zpubdk7hyhbcgid.onion