Hunt Ivanti CVE-2026-104935 in Your Proxy Logs Before the Board Asks
URL says welcome.cgi, header says wu.cgi. That mismatch is how you hunt CVE-2026-104935 in proxy logs. Lab-only grep session with terminal screenshots.
Read Full News
Kimsuky Is Sending Fake Resumes That End In Funhouse Ransomware
A Hangul resume drops Quasar RAT and ends in .Funhouse encryption. ASEC ties it to Kimsuky and earlier Endpoint ransomware cases.
Your Cheap Android Was Compromised Before You Turned It On
Midnight Mimosa ships in the firmware of cheap MediaTek Androids. You cannot uninstall it. Ad fraud and residential proxies are the business model.
Windows Just Let Booby-Trapped Files Skip the Download Warning
Mark of the Web is supposed to warn you before invoice.pdf.exe runs. CVE-2026-96951 lets crafted files skip that warning. October Patch Tuesday is mandatory.
Ivanti Connect Secure Got Rooted Again, This Time By Three Bugs Holding Hands
Three bugs holding hands got UTA0576 root on a fully patched Ivanti Connect Secure box. CVE-2026-104935 is on CISA KEV. The priv-esc patch is still cooking.
SQL Injection 101: Dump Your Own Lab Database Before Someone Else Dumps Yours
Stop reading about SQL injection and dump a database on purpose. Local Flask lab, real sqlmap output, and the one rule that keeps you out of jail: only test what you own.
Everyone Is Shipping an AI Pentester. Most of Them Are Expensive Autocomplete.
GitHub is drowning in agentic security tools. Some prove the bug. Most are a chatbot with a scanner bolted on. Here is what actually shipped this week.
Medicare Open Enrollment Is Here and So Are the Scammers Who Own Google Ads
Every October America opens its wallet for health coverage, and every October a bunch of clowns buy the top Google slot for Medicare.gov. The FTC is yelling about it.
Your MSP’s Backup Console Got Rooted and the Patch Does Nothing
AhsayCBS backup consoles are getting rooted by a no-creds exploit chain, and the version Ahsay shipped as the fix closes neither flaw. The call is coming from inside the MSP.
Citrix NetScaler Is On Fire Again and Everyone Is Shocked, Shocked I Tell You
Another week, another NetScaler zero-day being kicked to death in the wild. CVE-2026-88779 is on CISA KEV, it needs SAML to bite, and no previous patch fixes it.