Insights on offshore hosting, privacy, security and the cloud.
An 18-year-old buffer overflow in NGINX's rewrite module enables unauthenticated remote code execution. We explore why legacy code persists in production and how to respond.
Read article →State-linked groups continue to target energy infrastructure via Microsoft Exchange exploitation. We examine the attack patterns and what infrastructure operators must do to defend their systems.
Read article →Microsoft's MDASH system uses AI agents to find Windows flaws automatically. We examine what this shift toward automated vulnerability detection means for infrastructure operators.
Read article →A new campaign exploited RubyGems as a covert data exfiltration channel rather than for direct malware deployment. What this means for package management security.
Read article →Alert volume isn't the real problem—blind spots are. Learn why dangerous alerts slip past security teams and what to monitor.
Read article →Researchers uncovered a TrickMo Android trojan variant leveraging The Open Network blockchain for C2 communications, making infrastructure takedowns far more difficult.
Read article →
