Security researcher & pentester. I write about network security, web appsec, and breaking things ethically.
What a Refrigerator Teaches About IoT Baseline Hygiene
What a Refrigerator Teaches About IoT Baseline Hygiene
The refrigeration incident joins a familiar pattern: a long-lived embedded device with a maintenance interface, deployed by an operational team, reachable from the internet, and patched on nobody's schedule. The lesson transfers directly to any organisation running building controls, medical devices or industrial gateways.
Why CVE-2026-102037 Scores 9.2 in CVSS v4.0 and 8.1 in v3.1
Why CVE-2026-102037 Scores 9.2 in CVSS v4.0 and 8.1 in v3.1
Technical analysis of CVE-2026-102037 in Juniper Junos OS SRX Series.
Reading the 9.8: What the CVE-2026-33792 Vector Tells an Operator
Reading the 9.8: What the CVE-2026-33792 Vector Tells an Operator
A CVSS score summarises. The vector underneath it argues. For CVE-2026-33792 the vector is unusually useful, because each metric maps onto a decision someone has to make before the patch lands.