StarkMan - DEV Community

StarkMan

Sep 30

Wazuh: 17,587 Fingerprint Matches on the Security Platform Watching Everything

#wazuh #siem #securitymonitoring #dashboard

3 min read

StarkMan

Sep 30

D-Link DIR-822A: no patch, a public exploit, and a router nobody owns

#vulnerability #iot #endoflife

2 min read

StarkMan

Sep 30

11,011 Hosts on Port 3389: Reading an RDP Exposure Number Without Overreading It

#zoomeye #rdp #attacksurface #exposuremeasurement

3 min read

StarkMan

Sep 29

Inventory Work for CVE-2026-96357: Finding Affected Drupal Modules First

#security #drupal #cve #vulnerability

2 min read

StarkMan

Sep 29

Module inventory hygiene in the light of CVE-2026-96360

#drupal #webform #cve202696360 #xss

2 min read

StarkMan

Sep 29

Java Application Servers Are Still the Internet's Largest Exposed Estate

#zoomeye #jboss #weblogic #attacksurface

3 min read

StarkMan

Sep 29

917,169 Matches on Port 623 and 109,327 on app="IPMI": Two Views of the Out-of-Band Layer

#zoomeye #bmc #ipmi #outofband

3 min read

StarkMan

Sep 29

Windows Event Logging You Will Actually Use in an Investigation

#windows #logging #detection

3 min read

StarkMan

Sep 29

132,792 Matches for Magento and 10.0 CVSS: Sizing the Commerce Surface Behind CVE-2026-75650

#security #attacksurface #zoomeye

2 min read

StarkMan

Sep 28

48,183 and 42,025: Building and Industrial Protocols on the Public Internet

#cybersecurity #iot #networking

2 min read

StarkMan

Sep 28

MikroTrick and the SSH key check that forgot the exponent

#vulnerability #networking #cryptography

3 min read

StarkMan

Sep 28

4,526,693 Answers on Port 20000: DNP3 and the Confidence Problem in Grid Telemetry

#ics #dnp3 #energy #attacksurface

3 min read

StarkMan

Sep 28

Object Storage Access Reviews: Turning a Bucket List into Evidence

#cloudsecurity #objectstorage #accessreview

1

3 min read

StarkMan

Sep 28

D-Link DIR-822A Routers Expose Critical DHCP and L2TP Flaws With Public PoC

#vulnerability #dlink #router #cve202686296

1

2 min read

StarkMan

Sep 28

Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out

#security #zoomeye #exposure #supplychain

1

3 min read

StarkMan

Sep 27

Agency Patch Workflows for CVE-2026-96365: Coordinating 16 Module Updates Across Client Sites

#security #drupal #cve202696365 #operations

2 min read

StarkMan

Sep 27

Two PRTG Bugs, One Release: The 26.2.120.1449 Fix for CVE-2026-4637 and CVE-2026-4638

#vulnerability #prtg #cve20264638

3 min read

StarkMan

Sep 27

16,456,122 RDP Matches and 9,173,905 VNC Matches: The Remote Access Baseline

#zoomeye #ransomware #remoteaccess #exposure

2 min read

StarkMan

Sep 27

Click2Shell Exposure: What 7.9 Million WordPress Assets Do and Do Not Tell You

#wordpress #click2shell #zoomeye #rce

1

2 min read

StarkMan

Sep 27

Mattermost: 736,893 Fingerprint Matches on Self-Hosted Collaboration

#mattermost #collaboration #selfhosted #exposure

3 min read

StarkMan

Sep 27

CVE-2026-86510: An Out-of-Bounds Write in the D-Link DIR-822A L2TP Daemon

#security #vulnerability #router #dlink

3 min read

StarkMan

Sep 26

CVE-2026-66302: External Path Control in Skype for Business Server

#windows #unifiedcommunications #pathtraversal #rce

2 min read

StarkMan

Sep 26

Analyzing the Impact of Heartbleed on Legacy Infrastructure

#openssl #memorycorruption #legacysystems #embedded

6 min read

StarkMan

Sep 26

Artifact repositories as attack surface: 17,883 JFrog Artifactory assets and the supply chain behind them

#supplychain #exposuremanagement #jfrogartifactory #zoomeye

1

3 min read

StarkMan

Sep 26

TLS Certificates as Corroborating Evidence on Internet-Facing FortiGate Gateways

#security #fortinet #credentialexposure #zoomeye

1

5 min read

StarkMan

Sep 26

The Operational Risk of a Pre-Auth Mail Flaw: CVE-2026-48842 in Context

#vulnerability #webmail #sqlinjection #zoomeye

1

3 min read

StarkMan

Sep 26

Two Resolvers, Two Advisories: The Unbound DNSKEY Overflow (CVE-2026-81642) and the BIND SIG(0) Crash

#dns #unbound #bind #cve202681642

1

2 min read

StarkMan

Sep 25

The Exploited Zero-Day Had No CVSS Score: Reading the September 2026 Patch Tuesday by Exploitation, Not Severity

#security #patchmanagement #microsoft #exploitedinthewild

3 min read

StarkMan

Sep 25

Metabase CVE-2026-72898: an unauthenticated SQL injection that hands over the data warehouse

#metabase #sqlinjection #cve202672898 #kev

4 min read

StarkMan

Sep 25

Incident Readiness for CVE-2026-93952: A Tabletop Scenario for SD-WAN Teams

#security #incidentresponse #tabletop #velocloud

3 min read

StarkMan

Sep 25

Check Point CVE-2026-85102 and CVE-2026-93616: Two Flaws, One Gateway, One Deadline

#checkpoint #certificatevalidation #pathtraversal #securitygateway

3 min read

StarkMan

Sep 25

9,112 Indexed Kafka Endpoints Against 1,377,501 Services on Port 9092

#exposuremanagement #datainfrastructuresecurity

3 min read

StarkMan

Sep 24

1,770 Matches for Cisco Secure Email Gateway: The Mail Filter That Parses What Attacks It

#security #attacksurface #zoomeye

2 min read

StarkMan

Sep 24

4,076 Cisco ISE Fingerprint Matches: The Management Plane on the Internet

#zoomeye #cisco #ise #managementplane

3 min read

StarkMan

Sep 24

The JFrog Artifactory authentication bypass: when an empty signing key becomes an admin token

#supplychain #artifactrepository #authenticationbypass #jfrog

3 min read

StarkMan

Sep 23

974 CVEs in One Month: Mapping the Windows Patch Surface With Internet-Wide Data

#windows #patchmanagement #cyberspacemapping

2 min read

StarkMan

Sep 23

106 Rsync, 110 NFS and 1771 SMB Results: The File Transfer Layer Nobody Inventories

#zoomeye #filesharing #smb #nfs

4 min read

StarkMan

Sep 23

The Same Flaws Keep Getting Exploited: Reading CISA's Secure-by-Design Review as an Operations Problem

#securebydesign #patchmanagement #cisa #assetinventory

1

3 min read

StarkMan

Sep 23

Bastion Hosts on the Open Internet: What Asset Mapping Reveals About JumpServer Exposure (QVD-2026-65008)

#jumpserver #exposure #bastionhost #cyberspacemapping

2 min read

StarkMan

Sep 23

The /graphql Precondition: Understanding the Attack Surface Behind CVE-2026-75650

#security #vulnerability #adobecommerce #magento

2 min read

StarkMan

Sep 22

Building an Exposure Baseline: A Repeatable ZoomEye Method for Vulnerability Response

#exposuremanagement #internetmeasurement #methodology #zoomeye

4 min read

StarkMan

Sep 22

From p=none to Enforcement: A Working Sequence for DMARC Rollout

#emailsecurity #dmarc #spf #dkim

4 min read

StarkMan

Sep 22

BIND Memory-Safety and Resource Flaws: What the CERT-In Weakness List Actually Tells You

#dns #iscbind #vulnerability

3 min read

StarkMan

Sep 22

Kibana Exposure: 78,015 Observed Instances and the Analytics Stack as an Entry Point

#zoomeye #kibana #elastic

2 min read

StarkMan

Sep 22

633,723 Grafana Matches: The Observability Layer Is an Underrated Attack Surface

#zoomeye #grafana #observability #exposure

2 min read

StarkMan

Sep 22

Identity Is Now the Perimeter: Lessons From Credential-Based Intrusions

#identity #mfa #zerotrust

2 min read

StarkMan

Sep 21

Measuring internet-exposed RDP surface and what it means for defenders

#cybersecurity #infosec #security

1

5 min read

StarkMan

Sep 21

Internet-Exposed Jenkins Controllers: Measuring a Persistent Attack Surface

#zoomeye #jenkins #exposure

3 min read

StarkMan

Sep 21

Grafana at Internet Scale: What 603,659 Exposed Instances Tell Us About Observability Security

#zoomeye #grafana #observability

2 min read

StarkMan

Sep 21

Finding Codex Deployments After the Sandbox Escape Disclosures

#cybersecurity #infosec #openai #security

1

3 min read

StarkMan

Sep 21

Mapping the Reachable Apple Surface: What ZoomEye Sees That an MDM Console Does Not

#cybersecurity #ios #mobile #security

3 min read

StarkMan

Sep 21

Why the Cisco Secure Email Hardening Release Matters More Than One CVE

#security #vulnerability #cisco #cve202676443

2 min read

StarkMan

Sep 20

CVE-2026-87886: Insecure File Permissions in Acronis Backup Plugins for cPanel, WHM and Plesk

#security #vulnerability #cve202687886 #acronis

4 min read

StarkMan

Sep 20

1,551 Elasticsearch and 1,462 Memcached Endpoints: Two Cache Layers With Different Defaults

#zoomeye #exposuremeasurement #elasticsearch #memcached

3 min read

StarkMan

Sep 20

Port 6443 in the Wild: Measuring Public Kubernetes API Endpoint Exposure

#kubernetes #cloudnative #api #container

7 min read

StarkMan

Sep 20

Your AI Gateway Is an Identity Boundary: The LiteLLM MCP Authentication Bypass

#aisecurity #authentication #llminfrastructure #mcp

1

3 min read

StarkMan

Sep 20

Detecting and Containing CVE-2026-20344: A Monitoring Plan for Cisco FMC SQL Injection

#security #detection #incidentresponse

3 min read

StarkMan

Sep 19

CVE-2026-76460: Maximum-Severity Cisco ISE Authentication Bypass Under Active Exploitation

#cisco #cve202676460 #authenticationbypass #vulnerability

3 min read

StarkMan

Sep 19

Sizing Self-Managed GitLab Exposure After CVE-2026-85706

#gitlab #cve202685706 #attacksurface #zoomeye

3 min read

StarkMan

Sep 19

Measuring the SonicWall Edge: 15,608 WorkPlace Interfaces and the Limits of That Number

#zoomeye #internetmeasurement #edgesecurity #vpn

3 min read

One Year Club

1 Week Community Wellness Streak

Writing Debut

Want to connect with StarkMan?