SecOps
FortiBleed: What the June 2026 Campaign Tells Us About Internet-Facing Appliance Risk
Mass credential exfiltration from internet-exposed FortiGate management interfaces. IOC analysis and validated patch-check methodology.
Vulnerability Research · Threat Intel · Detection
SecOps
CVE research, threat intelligence, detection engineering, and security operations. The actual approach to confirming exposure and building tooling that works in production.
3 posts
SecOps
Client-Side Auth Bypass in Legacy AngularJS Clinical Applications· coming soon
How CVE-2019-10768 prototype pollution enables authorization bypass in AngularJS 1.x — and a safe demonstration methodology.
SecOps
CVE-2025-47981: Assessing Windows SPNEGO/NEGOEX Exposure Without Running Exploit Code· coming soon
CVSS 9.8, unauthenticated RCE via NEGOEX token parsing. A safe detection and exposure assessment script for security teams.