Exploits, Vulnerabilities Security Holes
Alright, so I recently remodeled my kitchen. Yes, you heard it right. A cybersecurity specialist talking about kitchen remodels. Bear with me, because this isn t a completely random post. During the remodel, I had contractors coming in and out and it got me thinking about how to keep my home network secure when you have [ ]
Today we re diving into a recent vulnerability that s affecting the AI and workflow automation community. We re talking about CVE-2026-33017, a critical vulnerability in Langflow, a tool for building and deploying AI-powered agents and workflows. So buckle up as we explore what this is all about, the potential impact, and how to keep your systems safe. [ ]
Following the recent news about cyber attacks coming from Iran, we re diving into the murky waters of state-sponsored hacking. Buckle up, because this is going to be a wild ride through the digital battlefield. The Backstory Iran has been making headlines in the cybersecurity world for quite some time. But due to the recent loss [ ]
The answer is yes. Unfortunately, that s become the world we live in. So today, we re diving into a topic that s as relevant as ever: checking what of your information has been leaked online. Data breaches are as common as coffee breaks, and it s crucial to know if your personal information is floating around the dark [ ]
Can you believe that Cisco got a 10 out of 10?! Today, we re diving into a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN. This one s a doozy, so let s get straight to the details. The Basics On February 25, 2026, Cisco published an advisory describing a critical authentication bypass in Cisco Catalyst SD-WAN Controller [ ]
Short version for fellow cynics: Microsoft’s modern Notepad added Markdown rendering and clickable links. That feature could allow remote or local code execution if a user clicked a crafted link. That bug is CVE-2026-20841 and was patched in February 2026 via Microsoft s app store. Timeline and context You can see the CVE here- https://www.cve.org/CVERecord?id=CVE-2026-20841 How [ ]
Following up from my last post on how sometimes the biggest security risks aren t technical but human, we re diving into the murky waters of phishing attacks. You might think that with all the advanced security measures out there, phishing would be a thing of the past. Spoiler alert: it s not. In fact, phishing remains one [ ]
Short version first: a code change in PayPal Working Capital (PPWC) exposed customer s personal data from July 1 2025 to December 13 2025. PayPal discovered the issue December 12 2025 rolled back the change December 13 and began notifying affected users in February 2026. About 100 customers were potentially impacted. Social Security numbers, birth dates, [ ]
Today, we re talking about a topic that s as old as the internet itself but remains as relevant as ever: stolen credentials. Despite advancements in security technologies, credential attacks continue to be one of the biggest attack vectors. Let s explore what these attacks look like, how they work as well as how we can monitor for [ ]
Today, we re going to talk about a classic vulnerability and inspiration for the name of this blog, that rocked the world of secure communications back in 2014, the POODLE attack. If you re not familiar with it, I am honestly surprised you are here. Either way grab a beer and let s stroll down memory lane. What [ ]