Category: Vulnerabilities
Everything filed under Vulnerabilities.
Three CVEs and the May 2026 Exploit Chain Nobody's Taking Seriously
May 2026 dropped three critical Linux vulnerabilities on a near-weekly cadence, and the security discourse has mostly treated them as three separate bad days. They're not. Together they form a reliable, race-free, forensically quiet kill…
AI Proofing Your It/cyber Career: The Human Only Capabilities That Matter
In the past ~4 weeks I have personally observed some irrefutable things in "AI" that are very likely going to cause massive shocks to employment models in IT, software development, systems administration, and cybersecurity. I know some…
EUVD API NPM And Go Packages + Nicer Docs
ENISA published docs for their European Vulnerability Database (EUVD) — https://euvd.enisa.europa.eu/apidoc…
VulnCheck's Free Community KEV & CVE APIs (Code & Golang CLI Utility)
Learn how to work with VulnCheck's new community KEV+NVD CVE APIs in curl & Go, & checkout a new, small CLI tool to get both simultaneously.
SHODAN API in R (With Examples)
Folks may debate the merits of the SHODAN tool, but in my opinion it's a valuable resource, especially if used for "good". What is SHODAN? I think ThreatPost summed it up nicely…
CVE Queries Right From Your Browser's Address Bar
I'm not sure why I never did this earlier, but a post on LifeHacker gave me an idea to add location bar quick search of CVEs (Common Vulnerabilities and Exposures), no doubt due to their example on searching LifeHacker for…
Three Resolutions For Web Developers
I'm on a " three things " motif for 2012, as it's really difficult for most folks to focus on more than three core elements well. This is especially true for web developers as they have so much to contend with on a daily basis, whether it…
Micropwns :: Risk Microprobabilities for Infosec?
I had not heard the term micromort prior to listening to David Spiegelhalter's Do Lecture and the concept of it really stuck in my (albeit thick) head all…
Metricon: Software Security's Futures Plural
Metrics are the servants of risk management and RM is about making…
"Web Development Is Dangerous"
Those were the words that greeted me within five minutes of checking out the Flask microframework for Python web applications. I feel compelled to inline those four, short…