-
Security Weekly: PHP2Shell, Arista VeloCloud zero-day, Cisco Expressway, Node2Shell and FortiSIEM
A turbulent week: PHP2Shell core RCE in PHP, VeloCloud SD-WAN zero-day SQLi, Cisco Expressway database root, Node2Shell Brotli overflow in Node.js, and FortiSIEM gRPC exploit.
-
Security Weekly #Oct 19, 2026: Cisco Secure Email Gateway, Palo Alto, BeyondTrust, Plex and Fortinet
A heavy perimeter security week: remote root in Cisco Secure Email Gateway, Palo Alto PAN-OS flaws, BeyondTrust zero-day, Plex2Shell cryptominer exploitation, and gateway flaws in Ivanti and Fortinet.
-
Security Weekly #Oct 12, 2026: Cisco NX-OS & Nexus switches, SonicWall SMA1000, Plex2Shell, Atlassian Data Center, WordPress 7.1.3 and ASUS
A heavy security week: triple unauthenticated root RCE in Cisco NX-OS and Nexus switches, CVSS 10.0 in SonicWall SMA1000, active Plex2Shell in-the-wild exploitation deploying XMRig cryptominers, Atlassian Data Center PoC, WordPress 7.1.3,…
-
Security Weekly #Oct 5, 2026: FortiMail zero-day, Cisco SD-WAN Manager, GlobalProtect and a third NetScaler flaw
A high-impact start to October: an in-the-wild zero-day file write flaw in FortiMail (CVE-2026-104286), unauthenticated API bypass in Cisco Catalyst SD-WAN Manager, client-side privilege escalation in Palo Alto GlobalProtect, and a third…
-
Security Weekly #Sep 28, 2026: Citrix NetScaler 0-day, Arista VeloCloud, WordPress Core, Microsoft SharePoint and MikroTik RouterOS
A volatile week across perimeter and core services: two actively exploited zero-day flaws in Citrix NetScaler ADC / Gateway, a CVSS 10.0 unauthenticated compromise in Arista VeloCloud SD-WAN Orchestrator, Path Traversal in…
-
Security Weekly #Sep 21, 2026: Cisco ISE, Cisco SEG, Orkes Conductor, Linux Kernel and SolarWinds ARM
A high-impact week for infrastructure security: an active zero-day in Cisco ISE (CVSS 10.0), unauthenticated root RCE in Cisco Secure Email Gateway (CVE-2026-76461), wide-scale scanning of Orkes Conductor, three Linux kernel flaws…
-
Security Weekly #Sep 14, 2026: Cisco FMC, Fortinet, GitLab and JFrog Artifactory
September brings no relief for infrastructure admins: an unauthenticated root bypass in Cisco FMC (CVE-2026-20079), a CVSS 10.0 arbitrary file read in GitLab (CVE-2026-85706), Fortinet’s monthly bulletin addressing hardcoded JWT keys in…
-
Security Weekly #Sep 07, 2026: MikroTik, VMware Workstation, Cisco Nexus and SonicWall
The week opens with an actively exploited flaw in MikroTik RouterOS SSH key handling (CVE-2026-67276 and CVE-2026-86060, a campaign running since September 2 confirmed by CERT Polska). Alongside it, Broadcom patched a…
-
Eight Specialized Agents Instead of One. My Orchestration Architecture in OpenCode
Instead of a monolithic AI coding assistant that loses context and holds excessive permissions, I built a template featuring a central coordinator and 8 specialized engineering subagents. Here is how I handle…
-
OmniRoute in Practice. A Central AI Model Router for Agents and Homelab
When you run multiple coding agents and automations that rely on language models, a central router becomes a necessity. OmniRoute connects many providers through a single endpoint, handles failover, token compression, and…