CVE-2026-17100

creationtimestamp| type| source ---|---|--- 2026-08-28 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu5vneox562y...

Zero-Day Dominance: How Akamai Defends Before the Industry Discloses

...

Akamai’s Customer-First Approach to Application Protection Costs

...

Black Hat State of Security Vendors

Andy Ellis has a roundup of the security vendors at Black Hat this year. Key Takeaways: We have entered into an AI world. While nearly half of booths didn't directly mention AI or agents in their taglines, the effects of AI are everywhere. Multiple spaces Identity, SaaS, AppSec, Data have almost...

Closing the Gap Between Detection and Protection with AI-Assisted Custom Rules

...

Friday Squid Blogging: Neon Flying Squid

The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and glided near the boat for about 30 metres. The astonished researchers were the first to capture photographs of such a thing, which looked lik...

CVE-2026-14671

creationtimestamp| type| source ---|---|--- 2026-08-20 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtjvbcpnzu2x...

Police Are Hiding Their Use of Flock Surveillance Cameras

A usage policy for Flock license plate reader cameras tells police not to talk about the cameras: When cops use Flock to arrest someone in Wapello County, Iowa, they don't want them to know. A usage policy for the automated license plate reader cameras in the county tells police, in no uncertain...

CVE-2026-16722

creationtimestamp| type| source ---|---|--- 2026-08-18 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtdnrnb2gl2c...

PT-2026-73115

Name of the Vulnerable Software and Affected Versions User Login History versions prior to 2.1.8 Description The User Login History plugin for WordPress contains a SQL Injection flaw, which occurs when an application fails to properly sanitize or escape input used in a database query, allowing an...

Friday Squid Blogging: Searching for the Colossal Squid

Fascinating video about searching for life undersea. The video basically makes the point that our bright white searchlights are scaring everything away, and that red light is more neutral. That, plus bait to attract sea creatures, is teaching us a lot about what's going on down there. Lots of...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m speaking, signing books, and participating in panel discussions at LAcon V in Anaheim, California, USA. My full schedule is here. I'm speaking online via Zoom at a League of Women Voters event on Tuesday, September 22, 2026, at...

CVE-2026-28170

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

CVE-2026-28170

CVE-2026-28170 affects the WordPress Blog Floating Button plugin, versions

CVE-2026-28170 WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

EUVD-2026-57955

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

CVE-2026-28170 WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

CVE-2026-28170

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hivesec in WordPress Plugin Blog Floating Button versions = 1.4.20...

Malicious Package

Overview my-auto-follow is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...