Vulnerability Research

Patch Now: Android RCE, cPanel Auth Bypass, MOVEit, Copy Fail LPE, and Weaver E-cology — May 2026

Emergency patch advisory covering 5 critical vulnerabilities requiring immediate patching across enterprise servers.

Threat Intel

CISA CI Fortify: Planning for Cyber Emergencies When Connectivity Itself Is the Target

Analyzing CISA's CI Fortify initiative: preparing critical infrastructure organizations for total telecommunication and internet severance.

Data Breach

Instructure Canvas Breach: 275 Million Students' Data Stolen, Linked to TeamPCP Campaign

How threat actors exfiltrated 275 million user records from Instructure Canvas in one of the largest educational data breaches in history.

CVE Deep Dive

CVE-2026-3854: GitHub RCE via a Single Git Push — What You Need to Know

Technical root cause of the command injection flaw in GitHub's internal git infrastructure allowing remote code execution via a single git push.

AI Security

CVE-2026-7482: Bleeding Llama — Critical Unauthenticated Memory Leak in Ollama

How Bleeding Llama allows unauthenticated remote attackers to extract API keys, prompt histories, and environment secrets in 3 API calls.

Security Roundup

Security Roundup: Bleeding Llama, GitHub RCE, 275M Student Records Stolen — Week of May 7, 2026

Weekly briefing: Bleeding Llama Ollama memory leak, GitHub single-push RCE, 275M Canvas student records breach, and CISA CI Fortify.

guides

OWASP Dependency-Track: Free SBOM-Powered Supply Chain Security for Everyone

A complete architecture and deployment guide for OWASP Dependency-Track using Docker Compose, FluxCD, and ArgoCD.

Supply Chain

Software Supply Chain Under Siege: The TeamPCP Campaign from Trivy to Bitwarden

Comprehensive forensic investigation into TeamPCP's multi-stage campaign compromising Trivy, LiteLLM, Bitwarden CLI, and npm registries.

Homelab

World Accessible Pi with Cert Auth!

Step-by-step tutorial on securing a public-facing Raspberry Pi running Pi-hole, Squid, and Webmin with client TLS certificate authentication.

Hardware

Hashcat and Machine Learning on a budget

How to build a budget multi-GPU cracking rig and machine learning workstation using repurposed hardware.

Machine Learning

Installing TensorFlow on HTPC

Lessons learned installing TensorFlow and GPU drivers on a custom living-room HTPC running Linux.

Hardware

HTPC Part 2: Overclocking Results & Thermal Management

Overclocking benchmarks and thermal dissipation results from custom water-cooled living-room PC builds.