https://hackyjs.com/posts/auditing-remote-access-gateways-after-cve-2026-15409-and-cve-2026-15410 Hacky JS en 2026-07-14T00:00:00.000Z Auditing Remote Access Gateways After CVE-2026-15409 and CVE-2026-15410 cybersecurity, sonicwall, zero-day, remote-access https://hackyjs.com/posts/auth-bypass-in-vmware-avi-load-balancer-from-detection-to-patch Hacky JS en 2026-07-14T00:00:00.000Z Auth Bypass in VMware Avi Load Balancer: From Detection to Patch vmware, avi-load-balancer, authentication-bypass, vulnerability, cybersecurity https://hackyjs.com/posts/from-worm-to-rat-miasmas-new-npm-payload-stays-hidden-by-killing-its-own-spread Hacky JS en 2026-07-14T00:00:00.000Z From Worm to RAT: Miasma’s New npm Payload Stays Hidden by Killing Its Own Spread npm, cybersecurity, supply-chain-security, malware https://hackyjs.com/posts/how-the-claude-chrome-extensions-oauth-misconfiguration-gave-attackers-access-to-gmail-and-docs Hacky JS en 2026-07-14T00:00:00.000Z How the Claude Chrome Extension's OAuth Misconfiguration Gave Attackers Access to Gmail and Docs cybersecurity, oauth, chrome-extension, gmail, google-docs https://hackyjs.com/posts/testing-the-impact-of-cve-2026-56155-and-cve-2026-56164-on-your-javascript-backend Hacky JS en 2026-07-14T00:00:00.000Z Testing the Impact of CVE-2026-56155 and CVE-2026-56164 on Your JavaScript Backend cybersecurity, javascript, backend, cve, patch-tuesday https://hackyjs.com/posts/auditing-your-edge-devices-for-the-cves-cisas-july-alert-calls-out Hacky JS en 2026-07-13T00:00:00.000Z Auditing Your Edge Devices for the CVEs CISA’s July Alert Calls Out cybersecurity, cisa, edge-devices, cve, patch-management https://hackyjs.com/posts/auditing-your-mcp-server-for-internet-exposure-credential-leaks-and-unauthenticated-endpoints Hacky JS en 2026-07-13T00:00:00.000Z Auditing Your MCP Server for Internet Exposure, Credential Leaks, and Unauthenticated Endpoints mcp, cybersecurity, llm-security, devsecops https://hackyjs.com/posts/auditing-your-npm-pipeline-after-the-jscrambler-compromise Hacky JS en 2026-07-13T00:00:00.000Z Auditing Your npm Pipeline After the jscrambler Compromise npm, supply-chain-security, javascript, devsecops https://hackyjs.com/posts/beyond-the-hash-behavioral-signals-that-catch-regenerating-malware-in-real-time Hacky JS en 2026-07-13T00:00:00.000Z Beyond the Hash: Behavioral Signals That Catch Regenerating Malware in Real Time cybersecurity, malware, behavioral-detection, endpoint-security https://hackyjs.com/posts/how-a-wordpress-plugin-flaw-escalates-to-rce-a-practical-look-at-the-attack-chain-and-defense Hacky JS en 2026-07-13T00:00:00.000Z How a WordPress Plugin Flaw Escalates to RCE: A Practical Look at the Attack Chain and Defense wordpress, rce, plugin-vulnerability, cybersecurity https://hackyjs.com/posts/what-the-turla-sharepoint-exploit-teaches-about-oauth-token-scope-client-side-state-and-blind-trust-in-microsoft-365-apis Hacky JS en 2026-07-13T00:00:00.000Z What the Turla SharePoint Exploit Teaches About OAuth Token Scope, Client-Side State, and Blind Trust in Microsoft 365 APIs sharepoint, oauth, microsoft-365, cybersecurity