Nginx Rift (CVE-2026-42945): RCE via heap overflow in ngx_http_rewrite_module
What is Nginx Rift (CVE-2026-42945)
Cybersecurity (96 articles)
Fragnesia (CVE-2026-46300): LPE on Linux via ESP-in-TCP and page cache
What is Fragnesia (CVE-2026-46300)
CVE-2026-46333 ssh-keysign-pwn: Unprivileged SSH and /etc/shadow key theft
What is ssh-keysign-pwn (CVE-2026-46333)
CVE-2026-43284 + CVE-2026-43500 Dirty Frag: privilege escalation via page cache on Linux
What is Dirty Frag (CVE-2026-43284 + CVE-2026-43500)
CVE-2026-31431 Copy Fail: Privilege escalation in Linux since 2017
What is Copy Fail (CVE-2026-31431)
Lab PoC: SSH Reverse Tunnel over Tor (APT SandWorm technique)
Context: what SandWorm does with SSH and Tor
OpenCode Security Agent: Runtime Protection for AI Agents
The problem: AI agents with full access to your system
DevSecOps with OpenSpec: Security Integration in Spec-Driven Development
Context: from specs to enforcement
Implementing a Security Bastion with Kernel Hardening (Grsecurity/Self-Protection) and Memory Encryption on Linux
1. Introduction: The Kernel Attack Surface
CVE-2025-59287: Deserialization of .NET Objects as an RCE Vector in WSUS.
If you manage Windows infrastructures, CVE-2025-59287 should be your top priority. This insecure deserialization vulnerability in Windows Se