https://hackyjs.com/posts/auditing-your-edge-devices-for-the-cves-cisas-july-alert-calls-out Hacky JS en 2026-07-13T00:00:00.000Z Auditing Your Edge Devices for the CVEs CISA’s July Alert Calls Out cybersecurity, cisa, edge-devices, cve, patch-management https://hackyjs.com/posts/auditing-your-mcp-server-for-internet-exposure-credential-leaks-and-unauthenticated-endpoints Hacky JS en 2026-07-13T00:00:00.000Z Auditing Your MCP Server for Internet Exposure, Credential Leaks, and Unauthenticated Endpoints mcp, cybersecurity, llm-security, devsecops https://hackyjs.com/posts/auditing-your-npm-pipeline-after-the-jscrambler-compromise Hacky JS en 2026-07-13T00:00:00.000Z Auditing Your npm Pipeline After the jscrambler Compromise npm, supply-chain-security, javascript, devsecops https://hackyjs.com/posts/beyond-the-hash-behavioral-signals-that-catch-regenerating-malware-in-real-time Hacky JS en 2026-07-13T00:00:00.000Z Beyond the Hash: Behavioral Signals That Catch Regenerating Malware in Real Time cybersecurity, malware, behavioral-detection, endpoint-security https://hackyjs.com/posts/how-a-wordpress-plugin-flaw-escalates-to-rce-a-practical-look-at-the-attack-chain-and-defense Hacky JS en 2026-07-13T00:00:00.000Z How a WordPress Plugin Flaw Escalates to RCE: A Practical Look at the Attack Chain and Defense wordpress, rce, plugin-vulnerability, cybersecurity https://hackyjs.com/posts/what-the-turla-sharepoint-exploit-teaches-about-oauth-token-scope-client-side-state-and-blind-trust-in-microsoft-365-apis Hacky JS en 2026-07-13T00:00:00.000Z What the Turla SharePoint Exploit Teaches About OAuth Token Scope, Client-Side State, and Blind Trust in Microsoft 365 APIs sharepoint, oauth, microsoft-365, cybersecurity https://hackyjs.com/posts/analyzing-the-ai-phishing-kit-used-against-spanish-holiday-bookings-a-developers-field-guide Hacky JS en 2026-07-12T00:00:00.000Z Analyzing the AI Phishing Kit Used Against Spanish Holiday Bookings: A Developer’s Field Guide cybersecurity, phishing, ai-security, travel-security https://hackyjs.com/posts/anatomy-of-the-gitea-docker-image-authentication-bypass-and-how-to-fix-it Hacky JS en 2026-07-12T00:00:00.000Z Anatomy of the Gitea Docker Image Authentication Bypass and How to Fix It gitea, docker, security, authentication-bypass, vulnerability https://hackyjs.com/posts/auditing-npm-integrity-after-the-jscrambler-incident-what-code-signing-misses Hacky JS en 2026-07-12T00:00:00.000Z Auditing npm Integrity After the Jscrambler Incident: What Code Signing Misses npm, supply-chain-security, code-signing, package-integrity https://hackyjs.com/posts/auditing-u-boot-bootloader-fit-images-for-cve-2026-46728-the-signature-flaw-that-undermines-secure-boot-on-embedded-linux Hacky JS en 2026-07-12T00:00:00.000Z Auditing U-Boot Bootloader FIT Images for CVE-2026-46728: The Signature Flaw That Undermines Secure Boot on Embedded Linux u-boot, embedded-linux, secure-boot, firmware-security, cve-2026-46728 https://hackyjs.com/posts/zimbras-web-client-xss-why-a-reflected-bug-became-a-full-account-takeover Hacky JS en 2026-07-12T00:00:00.000Z Zimbra's Web Client XSS: Why a Reflected Bug Became a Full Account Takeover zimbra, xss, account-takeover, web-security