SonicWall: verify SAML and MFA after the SSLVPN fix
MFA policy needs to follow the authentication paths the firewall actually offers. CVE-2026-19868 calls for checking configuration, firmware and access decisions together.
Blog
Guides pratiques sur le pentesting, la recherche de vulnérabilités et les outils de sécurité à base d’IA.
Les articles sont publiés en anglais et en portugais.
Recherche
124 articles
OpenSSH on Alpine: verify accounts and the daemon after patching
Using SSH keys also requires checking which authentication paths the server accepts. SSHole calls for connecting accounts, effective configuration, the installed package and the running daemon.
Amadeus: defining access to booking data
The Amadeus notices describe customers and bookings with different scopes. For businesses, the response needs to connect the data involved, who could query it and the evidence of containment.
Industrial Node-RED: who can deploy flows and expose routes?
Deploying a flow can change how an industrial integration behaves. Verify deployment authority and the protection of the routes that flow makes available.
BTCPay: the server changed. Who can still spend?
Replacing a machine calls for reviewing the authority attached to its wallet. Organize migration and integration acceptance before reopening the payment workflow.
Linux kernel fixes: approve the kernel that actually runs
Available updates and packages undergoing qualification require different decisions. Acceptance should identify the kernel loaded after each server’s maintenance.
False alerts: who can publish and restore a channel?
A message can arrive through the expected app and still require investigation. Review publishing permissions, alternative channels and criteria for restoring each function.
LXD and MicroCloud: verify the fix on every cluster member
The maintenance record should identify the version serving each administrative endpoint. Track the cluster update with evidence for every member.
Polymarket: what can a third-party script do in a session?
A familiar supplier should be considered alongside the code actually delivered and the operations it can reach inside the page.