Blog

Posts selection

Nullam cursus urna nec tellus interdum sollicitudin. Integer at nisl in lorem cursus tincidunt

ssh key reuse in Thales/Gemalto/SafeNet products

Posted on 9th Jul 2026

Overview Several Thales products (formerly Gemalto or SafeNet) embed the system's ssh key when the image is created. Affected products ProtectV 3.5 through 4.10.0 KeySecure "Next Generation" (all versions) Ciphertrust Manager before 2.4 Vulnerability ID CVE-2021-xxxxx (Waiting for...

Vulnerabilities in FortiAuthenticator

Posted on 9th Jul 2026

Overview FortiAuthenticator prior to version 6.3.0 contains several hardcoded passwords. These can be extracted from the FortiAuthenticator VM disk file with 7-Zip and Python. Static password for backup files Static key for encrypted database password fields Static password for debug logs...

Searching for DNS anomalies with the Top 1 Million

Posted on 9th Jul 2026

Recently, Cisco started publishing a list of the top 1 million DNS requests received by their servers, updated daily. @SwiftOnSecurity had the great idea to enrich EDR or SIEM data with the results. We're using Sentinel, so I put together a query to report on the anomalies. Results vary depen...