Skip to content
Saturday, October 17, 2026
GitHub Security Lab Shipped gh-secure So You Can Stop Shipping Open Source Naked
That ClickFix Paste Just Installed Variola, Not a “Fix”
Fortinet CLI Path Traversal Hit CISA KEV 185 Days After Fortinet Already Patched It
Hunt SAWFLY and BARECLAW on BeyondTrust After CVE-2026-102764

Cybersecsloth

the security industry is a joke. we cover it anyway.

Random News
GitHub Security Lab Shipped gh-secure So You Can Stop Shipping Open Source Naked
That ClickFix Paste Just Installed Variola, Not a “Fix”
Fortinet CLI Path Traversal Hit CISA KEV 185 Days After Fortinet Already Patched It
Hunt SAWFLY and BARECLAW on BeyondTrust After CVE-2026-102764

Cybersecsloth

the security industry is a joke. we cover it anyway.

Random News
Headlines
gh-secure CLI: GitHub Security Lab Repo Hardening in Two Minutes

GitHub Security Lab Shipped gh-secure So You Can Stop Shipping Open Source Naked

Variola Malware via ClickFix: Blackpoint Modular Implant IOCs

That ClickFix Paste Just Installed Variola, Not a “Fix”

CVE-2025-61624 Fortinet KEV: FG-IR-26-122 CLI Path Traversal

Fortinet CLI Path Traversal Hit CISA KEV 185 Days After Fortinet Already Patched It

Hunt BeyondTrust SAWFLY BARECLAW: CVE-2026-102764 Lab Walkthrough

Hunt SAWFLY and BARECLAW on BeyondTrust After CVE-2026-102764

CVE-2026-102764: BeyondTrust Remote Support Zero-Day, ARMORY CASTLE, CISA KEV

BeyondTrust Remote Support Just Got Rooted by the People It Was Meant to Keep Out

Data Centers as War Targets: Dual-Use Compute and Civilian Blast Radius

Data Centers Are War Targets Now and Dual-Use Is the Whole Punchline

GitHub AI Scan for Pull Requests GA: What It Does and What It Cannot Block

GitHub Made AI Scan for Pull Requests Generally Available and It Still Will Not Fail Your Check

FBI IC3 PSA: 2026 Midterm Election Scams, Deepfakes, Fake Voter Links

The FBI Says Midterm Season Is Open Season on Your Wallet and Your Voter File

AhsayCBS CVE-2026-105133 / 105134: Huntress Exploitation and CISA KEV

Your MSP Backup Console Got Webshells, Fake Edge XMRig, and a CISA KEV Stamp

CVE-2026-21589: Atlassian Data Center File Read Added to CISA KEV

Atlassian Just Handed Strangers Your WEB-INF and CISA Put It on the Calendar

Mandiant