blog.evan.lat dark

main site @ evan.lat. pgp for sensitive stuff: here. corporate friendly version: here

• 2026-09-14 more enterprise and contractor failure
• 2026-09-04 msrc disc. (placeholder)
• 2026-08-05 pre-auth RCE in horde groupware (CVE-2026-65053, CVE-2026-58451)
• 2026-07-30 deserialization as a service for a bunch of australian unis (CVE-2026-94109, CVE-2026-67615)
• 2026-07-10 cisco catalyst sdwan auth heap buffer overflow (CSCwu48719)
• 2026-05-31 CVE-2026-53582
• 2026-04-07 cisco asa xp but it isnt actually
• 2026-03-26 the great art of enterprise fail
• 2026-02-07 CVE-2026-25857
• 2025-10-29 msrc disc. (outlook exploit)
• 2025-10-01 how to breach a payment processor with these 3 vulns