The Stryker Incident Is a Warning: Every Organization Must Plan for Nation-State Adversaries
Too many organizations still build cyber programs around the wrong threat model.
Topic
Hacking
7 posts
The Axios npm Supply Chain Attack Is a Warning Shot for the Entire JavaScript Ecosystem
On March 31, 2026, the JavaScript ecosystem got another reminder that open source trust is fragile. Two malicious versions of Axios, one of the most widely used HTTP client libraries in the npm ecosys
Job and Investment Scams Are Becoming More Sophisticated
Online scams have become disturbingly advanced. Criminals today combine social engineering, emotional grooming, technical skills, and artificial intelligence to create operations that feel believable,
Understanding the Importance of API Security
The Importance of API Security
SqlNow: SQL Injection in DeliverNow: CVE-2021-26837
During an internal penetration test for a client, I identified a noteworthy vulnerability in DeliverNow, a software solution developed by HelpSystems now Fortra. This particular finding has since been
AuthForce: SonicWall UTM SSO Forced Authentication: CVE-2020-5148
In the rapidly evolving landscape of cybersecurity, I have identified a glaring vulnerability in the globally used SonicWALL UTM Appliance and SSO Agent.
SqlSpark: SQL Injection in TripSpark VEO Transport: CVE-2021-3262
In the ever-evolving realm of cybersecurity, My external penetration test for a client using the TripSpark VEO Transportation solution brought to light an intriguing vulnerability. This discovery has