Not just 'here's the CVE' — the actual approach to confirming exposure, building safe detection tooling, and coordinating disclosure. Written for practitioners who need answers before the patch window opens.
Mass credential exfiltration from internet-exposed FortiGate management interfaces. IOC analysis and a validated patch-check methodology.
How CVE-2019-10768 prototype pollution enables authorization bypass in AngularJS 1.x — and a safe demonstration methodology for developer briefings.
CVSS 9.8, unauthenticated RCE via NEGOEX token parsing. A safe detection and exposure assessment script for security teams.