hype
3
Substance
7
Brief · Security
Cisco fixes firewall zero-day that crashes SSL VPN devices
Cisco released updates for a denial-of-service zero-day in ASA and FTD software. Attackers are already using it to crash vulnerable firewalls remotely.
Topics
#networking
14 items · Page 1 of 2
hype
5
Substance
6
Brief · Security
Tailscale patches SSH flaws that allow root privilege escalation
Tailscale says its security team is patching almost a dozen vulnerabilities in its SSH implementation. The flaws could allow credential theft, server crashes and root privilege escalation.
By Guillaume · Tech
Skyfall, part 2: wall jumps, a real bow and a quiet network
April 2026: after a month off, I made Skyfall feel good in the hands (coyote time, wall jumps, a dash, a real bow) and taught the network to send nothing when nothing moves.
Analysis · Security
Edge Appliance Zero-Days: An Emergency Response Runbook for VPNs, Gateways and Firewalls
The first 72 hours after an actively exploited VPN, gateway or firewall zero-day: exposure scans, log checks, config diffs, containment gates and the evidence to keep.
hype
3
Substance
7
Brief · Security
Palo Alto Networks patches PAN-OS RCE zero-day exploited in attacks
Palo Alto Networks released fixes for CVE-2026-0322, a high-severity PAN-OS remote code execution flaw. BleepingComputer reports it is being exploited against firewalls.
hype
3
Substance
6
Brief · Security
Cisco patches a second actively exploited Secure Email Gateway zero-day
Cisco has patched another zero-day in its Secure Email Gateway that is being exploited. It allows unauthenticated remote command execution as root.
Analysis · Security
HL7 Interface Decommissioning Checklist: Shutting Down EHR Feeds Without Leaving a Door Open
A rollback-safe HL7 decommissioning checklist: inventory interfaces from the wire, cut them in order, probe both sides of the door, and keep proof for every gate.
Analysis · Security
Internet-Exposed Refrigeration Controllers: How to Audit OT Exposure and Lock It Down
Remote refrigeration and HVAC controllers often sit on the public internet behind a cellular modem. Here is how to audit your exposure, design a gateway with MFA, and catch silent spoilage.
Analysis · Security
How to Sandbox AI Agents: Network Egress Controls and Least Privilege
Any agent that can make a request can make a bad one. Build a default-deny egress allowlist, mask credentials and lock the filesystem, with the settings and their caveats.
Analysis · Tech
Optical Circuit Switching: Why Google and Lightmatter Are Ditching Electrical Switches for AI
AI clusters waste power converting light to electrons at every hop. Google's Apollo mirrors and Lightmatter's Photonic Fabric switch light itself, rewiring cluster topology on demand.
Analysis · Tech
The Deep-Sea Data War: Why Big Tech is Privatizing the Ocean's Cables
The cloud is a lie. The internet is just a very long, wet wire. Here is why Google and Meta are quietly bypassing telecom monopolies to lay their own intercontinental submarine cables.
Analysis · Tech
The Ultra Ethernet Rebellion: Big Tech's War on Nvidia's NVLink
Nvidia's real AI monopoly isn't silicon—it's the proprietary NVLink network connecting it all. Here is how the Ultra Ethernet Consortium plans to break the lock-in.