kozhevniko - DEV Community

kozhevniko

Sep 22

What an attacker gains from CVE-2026-7273 on a Zyxel GS1900 switch

#cybersecurity #infosec #networking #security

4 min read

kozhevniko

Sep 22

Hardening Beyond 7.1.1: Reducing the Surfaces Click2Shell Relies On

#wordpress #click2shell #zoomeye #rce

2 min read

kozhevniko

Sep 22

Cache Poisoning and Zone Injection: The Integrity Risks in the September 2026 BIND Advisory

#dns #iscbind #vulnerability

3 min read

kozhevniko

Sep 22

Triaging Codex Exposure: What a Count of 164 Does and Does Not Tell You

#cli #infosec #openai #security

3 min read

kozhevniko

Sep 21

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops

4 min read

kozhevniko

Sep 21

API Security: The Attack Surface That Grows Without a Firewall

#apisecurity #owasp #authorization

2 min read

kozhevniko

Sep 21

A Defender's Checklist for CVE-2026-81657 in IBM Guardium Data Protection

#vulnerability #ibmguardium #cve202681657 #security

2 min read

kozhevniko

Sep 21

Measuring exposed industrial control panels on the public internet

#cybersecurity #infosec #network #security

5 min read

kozhevniko

Sep 21

When an AI Gateway Becomes the Credential Store: Securing MCP Endpoints After CVE-2026-59822

#security #aiinfrastructure #mcp #authentication

2

1

3 min read

kozhevniko

Sep 21

The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders

#security #vulnerabilitymanagement #networksecurity #exploitedinthewild

4 min read

kozhevniko

Sep 20

Water utility PLC attacks: the control layer that was never designed to authenticate

#otsecurity #industrialcontrolsystems #waterutilities #exposuremanagement

3 min read

kozhevniko

Sep 20

How a Pre-Authentication Stack Overflow in Check Point Log Servers Leads to Root Code Execution

#security #vulnerability #checkpoint #remotecodeexecution

2 min read

kozhevniko

Sep 20

Gunra Ransomware: What the Joint Advisory Says About Edge Devices, MFA Bypass and Recovery

#ransomware #gunra #cisaadvisory #mfa

4 min read

kozhevniko

Sep 20

Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces

#security #zoomeye #exposure #supplychain

3 min read

kozhevniko

Sep 20

ZcopyReaper: A Local Privilege Escalation in the Linux Kernel RDS Path

#cybersecurity #linuxkernel #privilegeescalation

3 min read

kozhevniko

Sep 19

From KEV to Exposure: Mapping the September 2026 Batch to Measurable Services

#kev #attacksurface #zoomeye #exposuremeasurement

4 min read

kozhevniko

Sep 19

CVE-2026-76443: Injection Flaws in Cisco Secure Email Gateway Management Interfaces

#security #vulnerability #cisco #cve202676443

2 min read

kozhevniko

Sep 19

Why a Single Email Is Enough to Root a Cisco Secure Email Gateway

#security #vulnerability #emailsecurity #edgedevice

4 min read

kozhevniko

Sep 19

Rotating Secrets After an AI-Tooling Compromise: A Checklist for the September 2026 KEV Wave

#security #incidentresponse

3 min read

kozhevniko

Sep 19

Eight Million RouterOS Devices: Sizing the MikroTik Chained-Exploitation Problem from Measurement Data

#security #routersecurity #zoomeye

3 min read

kozhevniko

Sep 19

Defending Cisco Secure Email Gateway Against CVE-2026-76442: What to Check Before and After the Patch

#security #vulnerability #cisco #cve202676442

1

3 min read

kozhevniko

Sep 18

The AI Gateway Becomes a Target: Measuring LiteLLM and Kestra Exposure

#zoomeye #aisecurity #litellm #kestra

3 min read

kozhevniko

Sep 18

Using CISA KEV Deadlines as a Triage Clock for Vulnerability Backlogs

#security #vulnerabilitymanagement

2 min read

kozhevniko

Sep 18

Exposed Industrial Controllers: What ZoomEye Data Says About Internet-Facing PLCs

#zoomeye #otsecurity #ics #exposure

3 min read

kozhevniko

Sep 18

Proxmox VE Exposure: Why the Port 8006 Count Is Not the Number That Matters

#zoomeye #exposuremanagement #proxmox #virtualization

4 min read

kozhevniko

Sep 18

Edge Appliances Are Now the Control Plane: What the SonicWall SMA1000 Zero-Day Chain Teaches Defenders

#cybersecurity #edgesecurity #vulnerabilitymanagement #vpn

3 min read

kozhevniko

Sep 18

CVE-2026-76423: The Cisco ISE REST API Flaw That Hands Out Admin Without a Password

#cisco #ise #cve202676423 #authenticationbypass

4 min read

kozhevniko

Sep 17

Prioritizing Cisco's September Firewall Fixes: A Risk-Based Reading of 18 CVEs

#cisco #cve202620324 #patchprioritization #cvss

2 min read

kozhevniko

Sep 17

Jenkins Controller Compromise Is a Supply Chain Event: Lessons from 20 Plugin Flaws

#security #jenkins #supplychain #cicd

4 min read

kozhevniko

Sep 17

Exposure Is Not a One-Time Finding: Monitoring Industrial Protocol Reachability After the CISA PLC Alert

#cybersecurity #monitoring #networking #security

4 min read

kozhevniko

Sep 17

3,988 Hypervisor Consoles on the Open Internet: What ZoomEye Shows About Exposed Proxmox VE Management

#zoomeye #internetmeasurement #virtualization #attacksurface

3 min read

kozhevniko

Sep 17

The Bug That Sat Fixed for Three Years: Proxmox VE's Authentication Bypass and the Cost of Unsupported Hypervisors

#cybersecurity #virtualization #authentication #patchmanagement

3 min read

kozhevniko

Sep 17

Print Servers Are Still Domain-Connected Servers: Lessons from the PaperCut Pre-Authentication RCE Chain

#cybersecurity #printinfrastructure #remotecodeexecution #patching

3 min read

kozhevniko

Sep 17

Identity-First Remote Access for OT Networks: Replacing Flat VPNs Without Stopping the Plant

#otsecurity #ics #zerotrust #remoteaccess

3 min read

kozhevniko

Sep 17

Citrix NetScaler SAML Authentication Bypass: Why CVE-2026-19490 Turns a Gateway Into an Open Door

#security #vulnerability #citrix #netscaler

4 min read

kozhevniko

Sep 17

Why a 2016 KGUARD DVR service is still handing out root to strangers

#vulnerability #iot #kguard #cve202687827

3 min read

kozhevniko

Sep 17

17,877 Artifact Repositories on the Internet: Mapping the JFrog Artifactory Surface Behind CVE-2026-82329

#security #zoomeye #exposure #artifactory

4 min read

kozhevniko

Sep 17

Self-Hosted CI Runners Are Shared Secrets: Threat Modelling Your Build Infrastructure

#cicd #supplychain #devops #runnersecurity

3 min read

kozhevniko

Sep 17

161,764 Assets on Port 102: Sizing the Industrial Control Surface That AA26-231A Described

#security #zoomeye #exposure #ics

4 min read

kozhevniko

Sep 17

1.8 Million Reachable MongoDB Services: Reading Exposure Numbers Without Overreading Them

#zoomeye #mongodb #exposure #measurementmethodology

3 min read

kozhevniko

Sep 16

Two Ways Into mySCADA myPRO Manager: A Privileged API and an Open SMS Gateway

#vulnerability #ics #myscada #cve202673807

2 min read

kozhevniko

Sep 16

CVE-2026-67277 and the MikroTrick Chain: When Two Flaws Become One Attack

#security #vulnerability #mikrotik #routeros

3 min read

kozhevniko

Sep 16

239,093 NetScaler Deployments in View: Measuring the Citrix Edge After CVE-2026-19490

#security #zoomeye #exposure #netscaler

4 min read

kozhevniko

Sep 16

Starting My Developer Journey on DEV.to

#ai #programming #python

1 min read

Writing Debut

Want to connect with kozhevniko?