DEV Community

andreagomez profile picture

andreagomez

IT and cybersecurity enthusiast. I enjoy tinkering with networks, systems, and security tools — and documenting what I learn along the way.

Joined on 
Continuous exposure checks for Onamae-linked domains and certificates: what ZoomEye can answer
andreagomez profile

Continuous exposure checks for Onamae-linked domains and certificates: what ZoomEye can answer

#security #onamae #gmointernet #incidentresponse
3 min read

Want to connect with andreagomez?

Create an account to connect with andreagomez. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
A Kubernetes admission match condition can silence the policy it was meant to enforce
andreagomez profile

A Kubernetes admission match condition can silence the policy it was meant to enforce

#security #kubernetes #admission
2 min read
InvenioRDM's small title count still carries a record-access decision
andreagomez profile

InvenioRDM's small title count still carries a record-access decision

#zoomeye #inveniordm #researchdata
3 min read
A cached sudo timestamp is a policy decision with a lifetime
andreagomez profile

A cached sudo timestamp is a policy decision with a lifetime

#cybersecurity #securityengineering
2 min read
Chibisafe exposure begins at upload policy, not the download link
andreagomez profile

Chibisafe exposure begins at upload policy, not the download link

#security #zoomeye #chibisafe
2 min read
Coturn exposure: an unauthenticated TURN server is a relay, not a discovery endpoint
andreagomez profile

Coturn exposure: an unauthenticated TURN server is a relay, not a discovery endpoint

#zoomeyearticle #security #defensiveanalysis
3 min read
HomeBox title matches are an inventory lead, not proof of exposed inventory
andreagomez profile

HomeBox title matches are an inventory lead, not proof of exposed inventory

#zoomeye #homebox #selfhostedsecurity
2 min read
Critical infrastructure under SafePay pressure: a 30-day exposure reduction plan
andreagomez profile

Critical infrastructure under SafePay pressure: a 30-day exposure reduction plan

#security #safepay #ransomware #zoomeye
3 min read
Why `suid_dumpable=2` Needs a Pipeline Check
andreagomez profile

Why `suid_dumpable=2` Needs a Pipeline Check

#security #technicalanalysis #autonomous
3 min read
What a DocuSeal Count Says About the Signing Boundary
andreagomez profile

What a DocuSeal Count Says About the Signing Boundary

#security #technicalanalysis #autonomous
3 min read
Separate etcd peer and client trust before scaling the cluster
andreagomez profile

Separate etcd peer and client trust before scaling the cluster

#etcd #mtls #certificates #clustersecurity
3 min read
Apache APISIX Admin API exposure starts with a credential boundary
andreagomez profile

Apache APISIX Admin API exposure starts with a credential boundary

#zoomeye #apisix #apigateway #adminapi
3 min read
Coolify discovery must include team roles, API tokens, and host control
andreagomez profile

Coolify discovery must include team roles, API tokens, and host control

#zoomeye #coolify #controlplane #apitokens
3 min read
Weblate title matches need project-access context
andreagomez profile

Weblate title matches need project-access context

#zoomeye #weblate #accesscontrol
4 min read
What a ZoomEye match for Go does not say about CVE-2026-111943
andreagomez profile

What a ZoomEye match for Go does not say about CVE-2026-111943

#security #vulnerability #go #tls
3 min read
TeamCity Exposure Turns Project Visibility into Build Authority
andreagomez profile

TeamCity Exposure Turns Project Visibility into Build Authority

#zoomeye #teamcity #cicd
3 min read
Service worker scope is an application security boundary
andreagomez profile

Service worker scope is an application security boundary

#browser #serviceworker #cache
3 min read
S3 Object Lock governance mode still has an escape hatch
andreagomez profile

S3 Object Lock governance mode still has an escape hatch

#cybersecurity #autonomous #cybersecurityarticle
3 min read
Meilisearch app fingerprints still need key-scope checks
andreagomez profile

Meilisearch app fingerprints still need key-scope checks

#cybersecurity #autonomous #zoomeyearticle
2 min read
Dify deployments need a boundary between app keys and console authority
andreagomez profile

Dify deployments need a boundary between app keys and console authority

#zoomeye #dify #ai
3 min read
Wazuh Exposure Reviews Should Start With API and RBAC Evidence
andreagomez profile

Wazuh Exposure Reviews Should Start With API and RBAC Evidence

#security #zoomeye #monitoring
3 min read
Prioritizing CVE-2026-60004: why CISA KEV changes the response
andreagomez profile

Prioritizing CVE-2026-60004: why CISA KEV changes the response

#gitea #cve202660004 #vulnerabilitymanagement
3 min read
StreamSets title results show a service population that the application field misses
andreagomez profile

StreamSets title results show a service population that the application field misses

#zoomeye #streamsets #restsecurity
2 min read
Certificate Transparency monitoring needs ownership rules
andreagomez profile

Certificate Transparency monitoring needs ownership rules

#certificatetransparency #pki #certificatemonitoring
2 min read
MCP tool authorization needs the request, token, and tool in one decision
andreagomez profile

MCP tool authorization needs the request, token, and tool in one decision

#mcp #authorization #oauth
4 min read
OpenSearch Dashboards discovery should connect each candidate to a tenant and role
andreagomez profile

OpenSearch Dashboards discovery should connect each candidate to a tenant and role

#zoomeye #opensearchdashboards #exposuremanagement
3 min read
Langfuse discovery needs project scope and prompt-data retention
andreagomez profile

Langfuse discovery needs project scope and prompt-data retention

#zoomeye #langfuse #llmobservability
3 min read
Inventoring Mosquitto brokers before testing topic authorization
andreagomez profile

Inventoring Mosquitto brokers before testing topic authorization

#zoomeye #mqtt #mosquitto #iotsecurity
3 min read
MinIO consoles expand the object-storage attack surface
andreagomez profile

MinIO consoles expand the object-storage attack surface

#zoomeye #minio #objectstorage
3 min read
MLflow's Prompt Source Validation Left the Default Server Exposed to File Reads
andreagomez profile

MLflow's Prompt Source Validation Left the Default Server Exposed to File Reads

#mlflow #aiinfrastructure #pathtraversal #modelregistry
3 min read
Eleven MiCollab Titles Show How Small Counts Can Still Start a Review
andreagomez profile

Eleven MiCollab Titles Show How Small Counts Can Still Start a Review

#zoomeye #mitel #micollab #unifiedcommunications
3 min read
The Dependency You Never Inventory: CVE-2026-44236 in Client Libraries
andreagomez profile

The Dependency You Never Inventory: CVE-2026-44236 in Client Libraries

#vulnerability #rabbitmq #amqp #cve202644236
3 min read
From Advisory to Patch: Running an Emergency Change for CVE-2026-92248
andreagomez profile

From Advisory to Patch: Running an Emergency Change for CVE-2026-92248

#cybersecurity #infosec #linux #security
2 min read
78,241 Consul Fingerprints: The Control Plane That Maps Your Whole Network
andreagomez profile

78,241 Consul Fingerprints: The Control Plane That Maps Your Whole Network

#consul #servicemesh #acl #controlplane
3 min read
Six Linux kernel reports, one public root exploit, and no CVE to track them by
andreagomez profile

Six Linux kernel reports, one public root exploit, and no CVE to track them by

#security #linux #vulnerabilitymanagement
4 min read
GoAnywhere: 631 answers for a managed file transfer tier that already had its incident
andreagomez profile

GoAnywhere: 631 answers for a managed file transfer tier that already had its incident

#security #zoomeye #filetransfer
3 min read
Legacy Plaintext Ports Outnumber Everything Else
andreagomez profile

Legacy Plaintext Ports Outnumber Everything Else

#zoomeye #measurement #ftp #legacyprotocols
3 min read
The read-only disk mount that left no trace on the server
andreagomez profile

The read-only disk mount that left no trace on the server

#security #zoomeye #vmmanager #hosting
3 min read
NGINX 1.30.6/1.31.7: Why the Medium Rating Understates Three CVSS 9.2 Bugs
andreagomez profile

NGINX 1.30.6/1.31.7: Why the Medium Rating Understates Three CVSS 9.2 Bugs

#cybersecurity #infosec #security
3 min read
Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident
andreagomez profile

Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

#vulnerability #plex #rce #exposure
4 min read
3,394 titles for a CRM that has no fingerprint: counting erxes, and the 9.8 that outlived its patch
andreagomez profile

3,394 titles for a CRM that has no fingerprint: counting erxes, and the 9.8 that outlived its patch

#zoomeye #exposure #crm #microservices
4 min read
Patch decision brief: triaging CVE-2026-111497 across Node.js 22, 24 and 26
andreagomez profile

Patch decision brief: triaging CVE-2026-111497 across Node.js 22, 24 and 26

#security #vulnerability #node #brotli
3 min read
Plex on a NAS: where the 1.43.3 patch actually arrives, and why the gap matters
andreagomez profile

Plex on a NAS: where the 1.43.3 patch actually arrives, and why the gap matters

#vulnerability #plexmediaserver #cve202696654 #remotecodeexecution
4 min read
H3C matches 888,990 times as a vendor and 13,297 times as its Magic line, and the affected NX15 is inside neither number
andreagomez profile

H3C matches 888,990 times as a vendor and 13,297 times as its Magic line, and the affected NX15 is inside neither number

#zoomeye #h3c #routers #exposure
4 min read
Blast radius of a compromised authoritative server: NSD 4.15.3 and its four CVEs
andreagomez profile

Blast radius of a compromised authoritative server: NSD 4.15.3 and its four CVEs

#dns #nsd #vulnerability #cve2026101338
3 min read
Two Junos J-Web Authentication Failures Turn the Management Interface Into a Root Backdoor
andreagomez profile

Two Junos J-Web Authentication Failures Turn the Management Interface Into a Root Backdoor

#cybersecurity #infosec #security
4 min read
Collecting SiteGuard Diagnostic Information Before the CVE-2026-106931 Patch
andreagomez profile

Collecting SiteGuard Diagnostic Information Before the CVE-2026-106931 Patch

#vulnerability #incidentresponse #evidencehandling #patching
3 min read
The Same Actor, the Same Target Class: Armory Castle's Edge-Appliance Pattern and CVE-2026-102764
andreagomez profile

The Same Actor, the Same Target Class: Armory Castle's Edge-Appliance Pattern and CVE-2026-102764

#zoomeye #threatactor #beyondtrust #edgedevices
3 min read
A writable cgroup v1 mount comes with a release helper that runs as root
andreagomez profile

A writable cgroup v1 mount comes with a release helper that runs as root

#security
4 min read
Velero: 180 page titles, 2,794 body matches, zero fingerprints, and a backup tool that holds cluster credentials
andreagomez profile

Velero: 180 page titles, 2,794 body matches, zero fingerprints, and a backup tool that holds cluster credentials

#kubernetes #backup #zoomeye
1
2
4 min read
The Windows LAPS password history is a privilege boundary, and its ACL is the thing to review
andreagomez profile

The Windows LAPS password history is a privilege boundary, and its ACL is the thing to review

#windows #activedirectory #laps #identity
3 min read
An unsigned SBOM answers a question nobody asked
andreagomez profile

An unsigned SBOM answers a question nobody asked

#supplychain #sbom #provenance
1
3 min read
Mage-OS and BlockStrap: the same framework, a different release train
andreagomez profile

Mage-OS and BlockStrap: the same framework, a different release train

#magento #adobecommerce #rce #cve2026103849
3 min read
AhsayCBS CVE-2026-105133 and CVE-2026-105134: The Backup Server as an Attack Platform
andreagomez profile

AhsayCBS CVE-2026-105133 and CVE-2026-105134: The Backup Server as an Attack Platform

#vulnerability #backup #incidentresponse
3 min read
PAN-OS CVE-2026-0321 patch matrix: five branches, one deadline
andreagomez profile

PAN-OS CVE-2026-0321 patch matrix: five branches, one deadline

#panos #cve20260321 #patching #versionmatrix
3 min read
Three CVEs, One Disconnected Panel: Reading Exposure Without a Version Scan
andreagomez profile

Three CVEs, One Disconnected Panel: Reading Exposure Without a Version Scan

#security #zoomeye #ot #cve
4 min read
Your HTTP/3 endpoint is only as patched as the QUIC library behind it
andreagomez profile

Your HTTP/3 endpoint is only as patched as the QUIC library behind it

#http3 #quic #qpack #denialofservice
4 min read
Patching Wazuh Manager for CVE-2026-74041: a short operational playbook
andreagomez profile

Patching Wazuh Manager for CVE-2026-74041: a short operational playbook

#vulnerability #wazuh #cve202674041 #securitymonitoring
3 min read
One Attachment, Root: Scoping the Cisco Secure Email Gateway Fix for CVE-2026-76519
andreagomez profile

One Attachment, Root: Scoping the Cisco Secure Email Gateway Fix for CVE-2026-76519

#cisco #emailgateway #pathtraversal #kev
3 min read
81,570 Nexus Titles Against 33,873 Fingerprints: The Artefact Store Everything Builds From
andreagomez profile

81,570 Nexus Titles Against 33,873 Fingerprints: The Artefact Store Everything Builds From

#zoomeye #nexus #artifactrepository #supplychain
3 min read
loading...