DEV Community

StarkMan profile picture

StarkMan

404 bio not found

Joined Joined on 
Identity Is Now the Perimeter: Lessons From Credential-Based Intrusions
stark_zhuang_df5076f35c68 profile

Identity Is Now the Perimeter: Lessons From Credential-Based Intrusions

#identity #mfa #zerotrust
Comments
2 min read

Want to connect with StarkMan?

Create an account to connect with StarkMan. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Measuring internet-exposed RDP surface and what it means for defenders
stark_zhuang_df5076f35c68 profile

Measuring internet-exposed RDP surface and what it means for defenders

#cybersecurity #infosec #security
Comments
5 min read
Internet-Exposed Jenkins Controllers: Measuring a Persistent Attack Surface
stark_zhuang_df5076f35c68 profile

Internet-Exposed Jenkins Controllers: Measuring a Persistent Attack Surface

#zoomeye #jenkins #exposure
Comments
3 min read
Grafana at Internet Scale: What 603,659 Exposed Instances Tell Us About Observability Security
stark_zhuang_df5076f35c68 profile

Grafana at Internet Scale: What 603,659 Exposed Instances Tell Us About Observability Security

#zoomeye #grafana #observability
Comments
2 min read
Finding Codex Deployments After the Sandbox Escape Disclosures
stark_zhuang_df5076f35c68 profile

Finding Codex Deployments After the Sandbox Escape Disclosures

#cybersecurity #infosec #openai #security
Comments
3 min read
Mapping the Reachable Apple Surface: What ZoomEye Sees That an MDM Console Does Not
stark_zhuang_df5076f35c68 profile

Mapping the Reachable Apple Surface: What ZoomEye Sees That an MDM Console Does Not

#cybersecurity #ios #mobile #security
Comments
3 min read
Why the Cisco Secure Email Hardening Release Matters More Than One CVE
stark_zhuang_df5076f35c68 profile

Why the Cisco Secure Email Hardening Release Matters More Than One CVE

#security #vulnerability #cisco #cve202676443
Comments
2 min read
CVE-2026-87886: Insecure File Permissions in Acronis Backup Plugins for cPanel, WHM and Plesk
stark_zhuang_df5076f35c68 profile

CVE-2026-87886: Insecure File Permissions in Acronis Backup Plugins for cPanel, WHM and Plesk

#security #vulnerability #cve202687886 #acronis
Comments
4 min read
1,551 Elasticsearch and 1,462 Memcached Endpoints: Two Cache Layers With Different Defaults
stark_zhuang_df5076f35c68 profile

1,551 Elasticsearch and 1,462 Memcached Endpoints: Two Cache Layers With Different Defaults

#zoomeye #exposuremeasurement #elasticsearch #memcached
Comments
3 min read
Port 6443 in the Wild: Measuring Public Kubernetes API Endpoint Exposure
stark_zhuang_df5076f35c68 profile

Port 6443 in the Wild: Measuring Public Kubernetes API Endpoint Exposure

#kubernetes #cloudnative #api #container
Comments
7 min read
Your AI Gateway Is an Identity Boundary: The LiteLLM MCP Authentication Bypass
stark_zhuang_df5076f35c68 profile

Your AI Gateway Is an Identity Boundary: The LiteLLM MCP Authentication Bypass

#aisecurity #authentication #llminfrastructure #mcp
1
Comments
3 min read
Detecting and Containing CVE-2026-20344: A Monitoring Plan for Cisco FMC SQL Injection
stark_zhuang_df5076f35c68 profile

Detecting and Containing CVE-2026-20344: A Monitoring Plan for Cisco FMC SQL Injection

#security #detection #incidentresponse
Comments
3 min read
CVE-2026-76460: Maximum-Severity Cisco ISE Authentication Bypass Under Active Exploitation
stark_zhuang_df5076f35c68 profile

CVE-2026-76460: Maximum-Severity Cisco ISE Authentication Bypass Under Active Exploitation

#cisco #cve202676460 #authenticationbypass #vulnerability
Comments
3 min read
Sizing Self-Managed GitLab Exposure After CVE-2026-85706
stark_zhuang_df5076f35c68 profile

Sizing Self-Managed GitLab Exposure After CVE-2026-85706

#gitlab #cve202685706 #attacksurface #zoomeye
Comments
3 min read
Measuring the SonicWall Edge: 15,608 WorkPlace Interfaces and the Limits of That Number
stark_zhuang_df5076f35c68 profile

Measuring the SonicWall Edge: 15,608 WorkPlace Interfaces and the Limits of That Number

#zoomeye #internetmeasurement #edgesecurity #vpn
Comments
3 min read
StyleSmuggler: How a Payment Failure Email Became a Remote Code Execution Path in Magento
stark_zhuang_df5076f35c68 profile

StyleSmuggler: How a Payment Failure Email Became a Remote Code Execution Path in Magento

#cybersecurity #ecommercesecurity #vulnerabilitymanagement
Comments
3 min read
Reading the Anthropic Threat Intelligence Report as a Defenders' Checklist, Not a News Cycle
stark_zhuang_df5076f35c68 profile

Reading the Anthropic Threat Intelligence Report as a Defenders' Checklist, Not a News Cycle

#threatintelligence #aisecurity #defense
Comments
3 min read
Patching Guide for CVE-2026-75650: Closing the Adobe Commerce RCE
stark_zhuang_df5076f35c68 profile

Patching Guide for CVE-2026-75650: Closing the Adobe Commerce RCE

#security #vulnerability #adobe #magento
Comments
3 min read
MikroTik RouterOS CVE-2026-67276: Forged RSA Keys Can Bypass SSH Authentication
stark_zhuang_df5076f35c68 profile

MikroTik RouterOS CVE-2026-67276: Forged RSA Keys Can Bypass SSH Authentication

#security #mikrotik #routeros #ssh
Comments
2 min read
Default Credentials Are Still the Front Door: Reading the 2026 IoT Botnet Notices as an Asset Management Problem
stark_zhuang_df5076f35c68 profile

Default Credentials Are Still the Front Door: Reading the 2026 IoT Botnet Notices as an Asset Management Problem

#iot #botnet #assetmanagement #ddos
Comments
4 min read
DevOps and Data Platforms on the Open Internet: A ZoomEye Exposure Review
stark_zhuang_df5076f35c68 profile

DevOps and Data Platforms on the Open Internet: A ZoomEye Exposure Review

#zoomeye #devops #artifactory #databasesecurity
Comments
3 min read
Proxmox VE 7 and the Authentication Bypass That Was Fixed by Accident in 2023
stark_zhuang_df5076f35c68 profile

Proxmox VE 7 and the Authentication Bypass That Was Fixed by Accident in 2023

#virtualization #proxmox #authenticationbypass #ransomware
Comments
4 min read
Why the Same Old Bugs Keep Getting Exploited: CISA's Secure-by-Design Wake-Up Call
stark_zhuang_df5076f35c68 profile

Why the Same Old Bugs Keep Getting Exploited: CISA's Secure-by-Design Wake-Up Call

#cisa #vulnerabilitymanagement #securebydesign
Comments
3 min read
Virtual Patching for Edge Devices: When Firmware Fixes Arrive Too Slowly
stark_zhuang_df5076f35c68 profile

Virtual Patching for Edge Devices: When Firmware Fixes Arrive Too Slowly

#security #networkdefense
Comments
3 min read
MikroTrick: How Two SSH Flaws Let Attackers Take Over MikroTik Routers Without Credentials
stark_zhuang_df5076f35c68 profile

MikroTrick: How Two SSH Flaws Let Attackers Take Over MikroTik Routers Without Credentials

#networksecurity #routeros #authenticationbypass #cve202667276
Comments
4 min read
Unauthenticated access flaws in Cisco Secure Email Gateway: a defender's read of CVE-2026-76440
stark_zhuang_df5076f35c68 profile

Unauthenticated access flaws in Cisco Secure Email Gateway: a defender's read of CVE-2026-76440

#security #vulnerability #cisco #emailsecurity
Comments
2 min read
Prioritising the Cisco ISE Fixes: A Remediation Order for CVE-2026-76423 and Its Siblings
stark_zhuang_df5076f35c68 profile

Prioritising the Cisco ISE Fixes: A Remediation Order for CVE-2026-76423 and Its Siblings

#cisco #ise #cve202676423 #remediation
Comments
4 min read
Hardening Jenkins After the September 2026 Plugin Advisory: A Practical Guide
stark_zhuang_df5076f35c68 profile

Hardening Jenkins After the September 2026 Plugin Advisory: A Practical Guide

#security #jenkins #hardening #cicd
Comments
4 min read
Patching the Check Point VPN flaws: a prioritized response plan for CVE-2026-85102 and CVE-2026-85103
stark_zhuang_df5076f35c68 profile

Patching the Check Point VPN flaws: a prioritized response plan for CVE-2026-85102 and CVE-2026-85103

#security #checkpoint #vpn #cve
Comments
2 min read
Cisco Emergency Bundle Fixes 18 Secure Firewall Flaws Including sftunnel Root RCE
stark_zhuang_df5076f35c68 profile

Cisco Emergency Bundle Fixes 18 Secure Firewall Flaws Including sftunnel Root RCE

#cisco #securefirewall #cve202620324 #rootrce
Comments
3 min read
Sizing the Industrial Control Surface: What 41,601 Reachable EtherNet/IP Endpoints Tell Us About OT Exposure
stark_zhuang_df5076f35c68 profile

Sizing the Industrial Control Surface: What 41,601 Reachable EtherNet/IP Endpoints Tell Us About OT Exposure

#cybersecurity #iot #security
Comments
4 min read
When a Signature Check Fails Open: Inside the SAML Logic Behind CVE-2026-19490
stark_zhuang_df5076f35c68 profile

When a Signature Check Fails Open: Inside the SAML Logic Behind CVE-2026-19490

#security #vulnerability #citrix #netscaler
Comments
3 min read
The Unauthenticated Docker API: 298,430 Exposed Endpoints and Why Port 2375 Still Matters
stark_zhuang_df5076f35c68 profile

The Unauthenticated Docker API: 298,430 Exposed Endpoints and Why Port 2375 Still Matters

#zoomeye #docker #containersecurity #exposure
Comments
3 min read
Tool-Call Injection in LLM Agents: Why Your MCP Server Is the New Attack Surface
stark_zhuang_df5076f35c68 profile

Tool-Call Injection in LLM Agents: Why Your MCP Server Is the New Attack Surface

#aisecurity #llm #mcp #promptinjection
1
Comments
4 min read
15.6 Million Exposed RDP Endpoints: Why Remote Desktop Remains the Favourite Initial Access Vector
stark_zhuang_df5076f35c68 profile

15.6 Million Exposed RDP Endpoints: Why Remote Desktop Remains the Favourite Initial Access Vector

#zoomeye #rdp #ransomware #remoteaccess
Comments
4 min read
CVE-2026-87827 and the botnet supply chain behind cheap DVR hardware
stark_zhuang_df5076f35c68 profile

CVE-2026-87827 and the botnet supply chain behind cheap DVR hardware

#vulnerability #iot #kguard #cve202687827
Comments
2 min read
CVE-2026-73807 and CVE-2026-82567: Missing Authorization in mySCADA myPRO Manager
stark_zhuang_df5076f35c68 profile

CVE-2026-73807 and CVE-2026-82567: Missing Authorization in mySCADA myPRO Manager

#vulnerability #ics #myscada #cve202673807
Comments
2 min read
Why CVE-2026-67277 Reached the CISA KEV Catalog So Fast
stark_zhuang_df5076f35c68 profile

Why CVE-2026-67277 Reached the CISA KEV Catalog So Fast

#security #vulnerability #mikrotik #routeros
Comments
3 min read
When an Authentication Filter Reads the URL Instead of the Route: Lessons from CVE-2026-49869 in Kestra
stark_zhuang_df5076f35c68 profile

When an Authentication Filter Reads the URL Instead of the Route: Lessons from CVE-2026-49869 in Kestra

#security #authentication #kestra #cve202649869
Comments
4 min read
CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization
stark_zhuang_df5076f35c68 profile

CVE-2026-48710 (BadHost): How a Malformed Host Header Bypasses Starlette Path Authorization

#security #vulnerability #starlette #fastapi
1
Comments
4 min read
Exposed PLCs in the Water Sector: What CISA's Alert Reveals About Internet-Facing OT
stark_zhuang_df5076f35c68 profile

Exposed PLCs in the Water Sector: What CISA's Alert Reveals About Internet-Facing OT

#cybersecurity #infosec #iot #security
Comments
5 min read
Langflow CVE-2026-12944: How a Scanner Blocklist Gap Turns Into Root Code Execution
stark_zhuang_df5076f35c68 profile

Langflow CVE-2026-12944: How a Scanner Blocklist Gap Turns Into Root Code Execution

#security #vulnerability #langflow #ssrf
Comments
4 min read
SonicWall SMA1000 Command Injection (CVE-2026-83549): Chained Zero-Day to Root on the Edge
stark_zhuang_df5076f35c68 profile

SonicWall SMA1000 Command Injection (CVE-2026-83549): Chained Zero-Day to Root on the Edge

#vulnerability #sonicwall #sma1000 #cve202683549
Comments
3 min read
The Management Plane Is the Attack Surface: What Cisco FMC's Exploited Zero-Day Teaches About Exposed Admin Interfaces
stark_zhuang_df5076f35c68 profile

The Management Plane Is the Attack Surface: What Cisco FMC's Exploited Zero-Day Teaches About Exposed Admin Interfaces

#cybersecurity #attacksurface #exposuremanagement #cisco
Comments
5 min read
Exposed PLCs Are Still on the Internet: What CISA's Water Sector Alert Means for Attack Surface Management
stark_zhuang_df5076f35c68 profile

Exposed PLCs Are Still on the Internet: What CISA's Water Sector Alert Means for Attack Surface Management

#security #otsecurity #ics #zoomeye
Comments
5 min read
Security Exposure Counts Need Context
stark_zhuang_df5076f35c68 profile

Security Exposure Counts Need Context

#security #beginners
Comments
1 min read
Use ZoomEye to find Jupyter servers without identity verification enabled
stark_zhuang_df5076f35c68 profile

Use ZoomEye to find Jupyter servers without identity verification enabled

#cybersecurity #osint
Comments
6 min read
Best Practices for Enhancing Attack Surface Management and Accelerating Vulnerability Response
stark_zhuang_df5076f35c68 profile

Best Practices for Enhancing Attack Surface Management and Accelerating Vulnerability Response

#cybersecurity #osint
Comments
2 min read
Shodan vs ZoomEye Query Syntax Comparison
stark_zhuang_df5076f35c68 profile

Shodan vs ZoomEye Query Syntax Comparison

#cybersecurity #osint
1
Comments
2 min read
A Complete Guide to the Latest ZoomEye Search Syntax
stark_zhuang_df5076f35c68 profile

A Complete Guide to the Latest ZoomEye Search Syntax

#cybersecurity #osint
2
Comments
6 min read
Top 5 Domain and IP Intelligence Tools in OSINT
stark_zhuang_df5076f35c68 profile

Top 5 Domain and IP Intelligence Tools in OSINT

#cybersecurity #osint
2
Comments
3 min read
The Hunter Behind the Hacker
stark_zhuang_df5076f35c68 profile

The Hunter Behind the Hacker

#cybersecurity #osint
Comments 1
3 min read
Top 5 Technical Asset Discovery Tools in OSINT
stark_zhuang_df5076f35c68 profile

Top 5 Technical Asset Discovery Tools in OSINT

#cybersecurity #osint
Comments
3 min read
loading...