Mutual TLS gives a service a strong signal about the certificate presented by a client. It does not automatically tell the service whether that certificate is still acceptable today. Certificate revoc
Metabase is often exposed as a reporting portal. The visible login page is only one part of the deployment. The setup flow creates the first administrator, API keys can be created for automation, and
Apache James is a mail server, and its WebAdmin interface is a management API for mailboxes, domains, users, and server tasks. The control plane is not a secondary feature. Its routes can create users
Large Node.js estates often contain hundreds of services with different exposure, data paths, and owners. CVE-2026-42037 should be prioritized with more than CVSS alone. The score is 5.3, but the prac
An IP address in a threat report is a lead. It is not a finding. Mandiant published network indicators associated with the PeopleSoft exploitation campaign, including 5.199.162.157, 104.219.234.138, 1
A SAML response can contain a cryptographically valid XML Signature while the application consumes an assertion the signature never protected. This is the practical danger behind signature wrapping. T
A zero result from an internet search engine is easy to misread. It can mean that no matching assets are exposed to the scanner, that the product does not publish a stable fingerprint, or that authent
Network Block Device (NBD) lets a Linux client use a remote server as a block device. The design is useful for migration, testing and storage provisioning, but it changes the security question. A remo
Teedy is a document management system that combines document storage, search, user and group permissions, and a REST API. Its deployment defaults deserve attention because a document service can expos