Linux Tips & Patch Management

Key Takeaways Patch management tools often look alike on a feature list, but they don’t all solve the same problem. Some push updates to fleets of laptops and desktops, some...

Key Takeaways A password of 257 to 1024 bytes logs in to any key-only account on Linux systems that run sshd on musl libc without PAM, Alpine Linux above all....

Key Takeaways Your scanner says the server is running a vulnerable OpenSSL version. Your sysadmin says it was patched last month. Both are looking at the same host and reading...

Key...

Key Takeaways Most Tomcat risk comes from known, unpatched CVEs on old or end-of-life builds. High-impact flaws like CVE-2025-24813 and Ghostcat need specific risky settings to fire. Detection starts with...

Key Takeaways Most jQuery risk comes from old versions still sitting in production, not from anything newly discovered. XSS dominates the list through CVE-2020-11022, CVE-2020-11023, and CVE-2015-9251, with prototype pollution...

Some hackers are remembered for the code they wrote. Kevin Mitnick is remembered for something a lot harder to patch, which is his ability to talk people into handing over...

Key Takeaways Your vulnerability scanning tool says there are 4,000 open vulnerabilities across the estate. Your manager asks one question. Are we getting better or worse? Most teams cannot answer...

Key Takeaways Run a scan on a Linux server and the result is usually familiar: a wall of CVEs, almost no context, and no clear answer to what you should...

Key Takeaways   Angular applications are rarely compromised because of a weakness in the framework itself. They get compromised because a developer reached for bypassSecurityTrustHtml to make a third-party widget...

Key Takeaways A CVE identifies a specific publicly disclosed vulnerability; CVSS scores tell you how severe it is. CVE patching closes the vulnerability entirely – mitigation only limits exposure. Prioritize...