ssh key reuse in Thales/Gemalto/SafeNet products
Posted on
9th Jul 2026
Overview
Several Thales products (formerly Gemalto or SafeNet) embed the system's ssh key when the image is created.
Affected products
ProtectV 3.5 through 4.10.0
KeySecure "Next Generation" (all versions)
Ciphertrust Manager before 2.4
Vulnerability ID
CVE-2021-xxxxx (Waiting for...
Vulnerabilities in FortiAuthenticator
Posted on
9th Jul 2026
Overview
FortiAuthenticator prior to version 6.3.0 contains several hardcoded passwords. These can be extracted from the FortiAuthenticator VM disk file with 7-Zip and Python.
Static password for backup files
Static key for encrypted database password fields
Static password for debug logs...
Searching for DNS anomalies with the Top 1 Million
Posted on
9th Jul 2026
Recently, Cisco started publishing a list of the top 1 million DNS requests received by their servers, updated daily. @SwiftOnSecurity had the great idea to enrich EDR or SIEM data with the results. We're using Sentinel, so I put together a query to report on the anomalies. Results vary depen...