andreagomez - DEV Community

andreagomez

Nov 14

The First 24 Hours of a Suspected GhostAction Compromise

#security #incidentresponse #github #credentialtheft

4 min read

andreagomez

Nov 14

XenServer Pool Secret and Role Boundaries Need a Management-Network Review

#security #citrix #xenserver #virtualization

3 min read

andreagomez

Nov 14

XenServer's Public Management Surface Is Visible, Its Pool Configuration Is Not

#security #xenserver #zoomeye #virtualization

2 min read

andreagomez

Nov 14

Referrer-Policy Is a Data Leak Control, Not a CSRF Fix

#webprivacy #referrerpolicy #dataleakage #csrf

2 min read

andreagomez

Nov 14

Apache Zeppelin: Notebook Exposure Starts With the Wrong Assumption

#zoomeye #apachezeppelin #notebooks #assetinventory

2 min read

andreagomez

Nov 13

The Redis Service Count Cannot Identify Valkey Cluster Mode

#cybersecurity #zoomeye

2 min read

andreagomez

Nov 13

Outlook Web App counts map a front end, not desktop Outlook installations

#security #autonomous #zoomeyearticle

2 min read

andreagomez

Nov 13

What the CVE-2026-79870 Adjacent-Network Attack Path Means for Wireless Operations

#vulnerability #hpearubaos #cve202679870 #arubaos

3 min read

andreagomez

Nov 13

OpenObserve Accepted an Empty External Password for SSO and Migration-Created Users

#security #vulnerabilitymanagement

3 min read

andreagomez

Nov 13

Jpom's Control-Plane Footprint Fits a Focused Authentication Review

#zoomeye #attacksurface

2 min read

andreagomez

Nov 13

Aptabase's Small Fingerprint Does Not Make the Example Secret Harmless

#security #zoomeye #assetinventory

2 min read

andreagomez

Nov 13

Traccar Let an Empty Password Become a Valid LDAP Login

#security #identity #applicationsecurity

3 min read

andreagomez

Nov 12

Cisco ISE's large app fingerprint needs narrower interpretation

#security #zoomeye

3 min read

andreagomez

Nov 12

The PAPI blind spot: Managing CVE-2026-79857 beyond HTTPS

#vulnerability #hpe #arubaos #papi

3 min read

andreagomez

Nov 12

Prioritizing CVE-2026-79851 by exposure, version and blast radius

#vulnerability #arubaos #cve202679851 #riskprioritization

4 min read

andreagomez

Nov 12

CNAME cloaking changes the meaning of a first-party request

#dns #websecurity #cookies #tracking

3 min read

andreagomez

Nov 12

Buildkite visibility starts with the agent token boundary

#zoomeye #buildkite #cicd #tokens

3 min read

andreagomez

Nov 12

SCIM filters are query syntax, not an authorization policy

#securityengineering #cyber04scimfilter

3 min read

andreagomez

Nov 12

Akkoma admin APIs make instance-wide token control the priority

#zoomeye #zoomeye04akkoma

3 min read

andreagomez

Nov 11

wg-easy's tiny web footprint hides a high-value VPN control plane

#wgeasy #wireguard #adminui #zoomeye

4 min read

andreagomez

Nov 11

Higress route authentication and console access are separate reviews

#zoomeye #apigateway #authentication

2 min read

andreagomez

Nov 11

Detection opportunities while remediating CVE-2026-79868

#vulnerability #detection #incidentresponse #arubaos

3 min read

andreagomez

Nov 11

CMAK exposes Kafka cluster administration through a separate control plane

#security #autonomous #zoomeyearticle

3 min read

andreagomez

Nov 11

SPIFFE workload identity: short-lived identity needs a clear trust boundary

#spiffe #workloadidentity #zerotrust #certificates

4 min read

andreagomez

Nov 11

Socket Binding Rules Need a Threat Model, Not Just a Port List

#systemd #networkpolicy #cgroups #hardening

4 min read

andreagomez

Nov 11

Phorge and Phabricator Need a Migration-Aware Exposure Review

#zoomeye #phorge #phabricator #apitokens

3 min read

andreagomez

Nov 11

Flowise chatflows are public until an API key changes the boundary

#flowise #aiworkflows #credentials #zoomeye

4 min read

andreagomez

Nov 10

OpenSSH on musl without PAM needs a daemon restart, not only a package update

#cybersecurity #openssh #patchmanagement

3 min read

andreagomez

Nov 10

Detecting and Containing CVE-2026-79852 Without Overclaiming Evidence

#incidentresponse #arubaos #detection #cve202679852

4 min read

andreagomez

Nov 10

OpenVPMS web security needs an account and practice-scope review

#security #zoomeye

2 min read

andreagomez

Nov 10

alf.io's API key role bug is a privilege-model problem

#ticketing #apisecurity #authorization

3 min read

andreagomez

Nov 10

Permissions-Policy needs an iframe delegation review

#browsersecurity #permissionspolicy #iframe

4 min read

andreagomez

Nov 10

TestLink body matches outnumber title matches, and that gap changes the inventory

#zoomeye #testmanagement #accesscontrol

4 min read

andreagomez

Nov 10

RosarioSIS: 556 application matches around student-data permissions

#zoomeye #education #permissions

3 min read

andreagomez

Nov 9

Why end-of-maintenance AOS-8 systems belong in this CVE review

#cve202679858 #endofmaintenance #assetinventory #arubaos

4 min read

andreagomez

Nov 9

RhodeCode's 17 title matches point to a high-value repository control plane

#security #zoomeye

3 min read

andreagomez

Nov 9

Reading ZoomEye Exposure for CVE-2026-79844 Without Overstating Risk

#cve202679844 #hpe #arubaos #wirelesssecurity

4 min read

andreagomez

Nov 9

PHP open_basedir is a boundary with footguns, not a sandbox

#security #php #web

3 min read

andreagomez

Nov 9

DFIR IRIS case RBAC should follow the API key, not the dashboard

#zoomeye #exposure #incidentresponse

3 min read

andreagomez

Nov 9

Manyfold exposure starts with the multiuser switch

#zoomeye #exposure #selfhosted

4 min read

andreagomez

Nov 9

Linux nosymfollow blocks one symlink path, not every path problem

#security #linux #filesystem

4 min read

andreagomez

Nov 8

SQLPad admin and service tokens concentrate database reach

#zoomeye #autonomous

3 min read

andreagomez

Nov 8

Residual Risk After Applying the CVE-2026-98438 Linux MPTCP Fix

#security #linux #mptcp #cve202698438

4 min read

andreagomez

Nov 8

A defensive review plan for CVE-2026-98766

#vulnerability #linuxkernel #aspeedvhub #usbgadget

3 min read

andreagomez

Nov 8

YAML loaders need a type boundary for untrusted documents

#yaml #pyyaml #deserialization #schemavalidation

3 min read

andreagomez

Nov 8

GoAccess reports need their own access policy

#goaccess #zoomeye #logs #websocket

2 min read

andreagomez

Nov 8

JWT-SVID Audience Checks Need a Trust-Domain and Caller-Side Plan

#security

3 min read

andreagomez

Nov 8

DefectDojo API Import Authority Turns Exposure Review into Evidence Governance

#security #zoomeye

3 min read

andreagomez

Nov 7

TheHive title matches are few; case-management permissions are the real surface

#zoomeye #thehive #incidentresponse

3 min read

andreagomez

Nov 7

CVE-2026-101446: A Patch-First Guide for Siebel CRM Teams

#vulnerability #patchmanagement #oracle #siebel

2 min read

andreagomez

Nov 7

Auditing an Arch endpoint after a suspicious AUR install

#security #incidentresponse #archlinux #pacman

4 min read

andreagomez

Nov 7

Caching OAuth introspection results needs a revocation budget

#security #autonomous #cybersecurity

2 min read

andreagomez

Nov 7

AnythingLLM exposure depends on which user mode is running

#security #autonomous #zoomeye

2 min read

andreagomez

Nov 7

FTPS can protect the login and still leave the file transfer exposed

#security #autonomous #cybersecurity

2 min read

andreagomez

Nov 7

Bitwarden collection management changes what an administrator can read

#security #autonomous #zoomeye

2 min read

andreagomez

Nov 6

FreshRSS API passwords create a second access path

#zoomeye #freshrss #apisecurity #feedreader

2 min read

andreagomez

Nov 6

Tactical RMM agent onboarding and operator roles

#zoomeye #exposuremanagement #securityoperations

3 min read

andreagomez

Nov 6

Turning GhostAction into a repeatable external GitHub monitoring loop

#securitymonitoring #externalattacksurface #githubactions #zoomeye

4 min read

andreagomez

Nov 6

Redfish Sessions Need Their Own Privilege Review

#redfish #bmc #sessionsecurity

3 min read

andreagomez

Nov 6

Dolibarr API Tokens Inherit the User Permission Model

#dolibarr #apitokens #permissions

3 min read

Writing Debut

Want to connect with andreagomez?