Technical Advisory · Retrospective 2024
regreSSHion: verify the running server, not just an OpenSSH version string
A pre-authentication race condition showed why SSH keys, package backports and server patch state belong in separate checks.
Technical Advisory
Threats
Technical advisories: affected products and versions, available fixes, and the evidence behind each line.
Technical Advisory · Retrospective 2024
ClickFix asks the user to cross the execution boundary
A repair prompt can be a malware-delivery step. Investigate the requested action and whether it actually ran.
Technical Advisory · Retrospective 2024
ScreenConnect’s server was the high-value target
The February 2024 ScreenConnect flaws put server ownership, administrative reach and tenant boundaries in the response scope.
Technical Advisory · Retrospective 2023
CitrixBleed required a session response
CVE-2023-4966 linked a memory-disclosure flaw to reusable sessions that needed a separate recovery decision.
Technical Advisory · Retrospective 2023
HTTP/2 Rapid Reset: map the work a cancelled stream leaves behind
CVE-2023-44487 made request churn and protocol termination more useful questions than a connection count alone.
Technical Advisory · Retrospective 2022
AiTM phishing: why a completed MFA prompt can still end in session theft
The recovery task follows the stolen session into the mailbox, its persistence settings and the business conversations it exposed.
Technical Advisory · Retrospective 2022
Spring4Shell depends on how the application is deployed
Assess CVE-2022-22965 using the actual runtime, Spring dependencies, packaging and servlet container.
Subscribe: RSS for Threats