Intermediate Security
Answering the MFA Section of a Cyber Insurance Application
How to answer the MFA section of a cyber insurance application: inventory accounts, separate coverage from method, and document every exception.
Start learning
Knowledge Base
Learn Guides — Page 2
Showing 24 of 362 guides. Use the numbered pages to browse the complete archive.
Intermediate Security
Running a 60-Minute Ransomware Tabletop for a Small IT Team
A ransomware tabletop for a small IT team in 60 minutes: agenda, five injects, safety rules, decision record and an after-action template.
Start learning
Intermediate Security
How to Secure Node-RED With adminAuth and HTTPS
How to secure Node-RED: turn on adminAuth, hash passwords, serve the editor over HTTPS, protect HTTP endpoints and review flows for backdoors.
Start learning
Beginner Security
What Is Node-RED and Why Is an Open Editor Risky?
What is Node-RED? A visual flow tool used on gateways and labs. Learn how its editor works and why an open one lets anyone run commands.
Start learning
Intermediate Security
Why Industrial IoT Gateways Need a Named Patch Owner
Industrial IoT gateways fall between IT and OT, so fixes sit unapplied for months. How to assign a patch owner and what that role covers.
Start learning
Intermediate Security
How to Detect Ivanti Connect Secure Exploitation
How to detect Ivanti Connect Secure exploitation from the October 2026 chain: proxy logs, LDAP and Kerberos traffic, host artifacts and log gaps.
Start learning
Beginner Security
What Is a Predictable Identifier Vulnerability?
A predictable identifier vulnerability lets attackers guess tokens, file names or IDs meant to be secret. How CWE-340 works and why low scores mislead.
Start learning
Intermediate Security
Why Partial Security Patches Mean Upgrading Twice
Partial security patches close one link of a chain and leave the rest for later. Why edge devices need a second upgrade and how to track staged fixes.
Start learning
Intermediate Security
Fragnesia Fixed Kernel Versions: How to Check Each Host
Fragnesia fixed kernel versions for upstream and Ubuntu, how to check the running kernel on each host, and the module workaround if you cannot reboot.
Start learning
Beginner Security
What Is a Linux Page Cache Attack? How Fragnesia Works
A Linux page cache attack changes the in-memory copy of a read-only file to gain root. Learn how Fragnesia does it and why disk checks miss it.
Start learning
Intermediate Security
Why Appliance Linux Kernel Patching Lags Months Behind
Appliance Linux kernel patching depends on the vendor, so fixed bugs stay exploitable for months. What to ask vendors and which controls you own.
Start learning
Intermediate Security
How to Block PHP Execution in Magento Media Folders
Block PHP execution in Magento media folders with nginx and Apache deny rules so uploaded files cannot run as web shells, then verify the 403.
Start learning
Intermediate Security
Why Magento Isolated Patches Need the Latest Patch Level
A Magento isolated patch only applies to the latest patch level of its line. Here is why stores that fall behind lose days in an emergency.
Start learning
Beginner Security
What Is a Polyglot File and Why Upload Checks Miss It
A polyglot file is valid in two formats at once, such as an image that also holds script. Learn why upload checks miss it and how to defend.
Start learning
Intermediate Security
How to Write an AI Acceptable-Use Policy for Cyber Insurance
Write an AI acceptable use policy for cyber insurance renewal: approved tools, banned data, human review, reporting, exceptions and versioned evidence.
Start learning
Intermediate Security
How to Build an AI Tool Inventory for Cyber Insurance
Build an AI tool inventory for cyber insurance renewal: owners, data categories, account tiers, retention and training settings, and the evidence for each.
Start learning
Intermediate Security
How to Audit Cisco ASA and FTD Exposure to CVE-2026-76418
Audit Cisco ASA and FTD exposure to CVE-2026-76418: check the release, SSL VPN reachability and secondary authentication on every tunnel group.
Start learning
Intermediate Security
How to Document AI Data Flows for Cyber Insurance Underwriting
Document AI data flows for cyber insurance underwriting: what enters each service, retention and training terms, subprocessors, deletion and contract evidence.
Start learning
Intermediate Security
How to Plan a Cisco ASA or FTD Upgrade for CVE-2026-76418
Plan a Cisco ASA or FTD upgrade for CVE-2026-76418: pick the fixed release, check compatibility, back up, upgrade the standby first and plan a rollback.
Start learning
Beginner Security
What Is an Unchecked Return Value NULL Pointer Dereference?
A NULL pointer dereference from an unchecked return value (CWE-690) crashes or reloads a device. How it works and why CVE-2026-76418 is availability only.
Start learning
Intermediate Security
AI Questions in Cyber Insurance Renewals: What to Prepare
Some cyber insurance renewal forms now ask about staff AI tools, data and policy. No standard question set exists yet. What to inventory and evidence first.
Start learning
Intermediate Security
How to Fix the Ruby Onigmo Regexp Bugs in Your Apps
Fix the Ruby Onigmo regexp bugs behind GitLab's CVEs: upgrade to Ruby 4.0.9, 3.4.12 or 3.3.13 and find code that compiles untrusted patterns.
Start learning
Beginner Security
What Is an Integer Overflow Vulnerability?
An integer overflow vulnerability wraps a size calculation to a tiny number, so code writes past its buffer. Here is how that becomes code execution.
Start learning
Intermediate Security
Why Untrusted Regex Patterns Are a Code Execution Risk
Untrusted regex patterns can corrupt memory while they compile, as GitLab CVE-2026-97229 showed. Learn how to design features that accept them safely.
Start learning