DEV Community

Diego Diaz profile picture

Diego Diaz

Systems Engineering student building Sable & AEGIS. Cybersecurity, pentesting & AI enthusiast. Coding from Dominican Republic 🇩🇴

Joined Joined on  Personal website https://sable.somoswilab.com/
Nx Console 18.95.0: How a 2.2M-Install VS Code Extension Became a Credential Stealer
alejandxr profile

Nx Console 18.95.0: How a 2.2M-Install VS Code Extension Became a Credential Stealer

#supplychain #vscodeextension #credentialtheft #nxconsole
Comments
3 min read
TeamPCP Breaches GitHub: 3,800 Internal Repos Exfiltrated via Poisoned VS Code Extension
alejandxr profile

TeamPCP Breaches GitHub: 3,800 Internal Repos Exfiltrated via Poisoned VS Code Extension

#githubbreach #teampcp #supplychain #vscodeextension
5
Comments
4 min read
CVE-2026-9082: Unauthenticated SQL Injection in Drupal Core Lets Attackers Execute Remote Code on PostgreSQL Sites
alejandxr profile

CVE-2026-9082: Unauthenticated SQL Injection in Drupal Core Lets Attackers Execute Remote Code on PostgreSQL Sites

#drupal #cve20269082 #sqlinjection #rce
5
Comments
4 min read
Chrome 146 Zero-Days: The Skia and V8 Attack Surface, 2026 Edition
alejandxr profile

Chrome 146 Zero-Days: The Skia and V8 Attack Surface, 2026 Edition

#chrome #zeroday #skia #v8
Comments
6 min read
AEGIS: Open-Source SOAR for Indie Founders
alejandxr profile

AEGIS: Open-Source SOAR for Indie Founders

#aegis #soar #opensource #indie
Comments
9 min read
Audit a Cursor or v0-Built MVP Before You Launch
alejandxr profile

Audit a Cursor or v0-Built MVP Before You Launch

#vibecoding #cursor #v0 #mvp
5
Comments
8 min read
The 2026 Vibe-Coder Security Checklist: 17 Items
alejandxr profile

The 2026 Vibe-Coder Security Checklist: 17 Items

#checklist #vibecoding #indie #prelaunch
5
Comments
9 min read
Cisco Patches CVSS 10.0 Flaw in Secure Workload — Unauthenticated Attackers Could Gain Site Admin via API
alejandxr profile

Cisco Patches CVSS 10.0 Flaw in Secure Workload — Unauthenticated Attackers Could Gain Site Admin via API

#cisco #cve202620223 #cvss10 #restapi
5
Comments
4 min read
Megalodon: How 5,561 GitHub Repositories Got Backdoored in Six Hours
alejandxr profile

Megalodon: How 5,561 GitHub Repositories Got Backdoored in Six Hours

#githubactions #supplychain #cicdsecurity #devsecops
Comments
4 min read
Crunchyroll Breach: How a Telus Supply-Chain Compromise Let Attackers In — and What to Hunt For
alejandxr profile

Crunchyroll Breach: How a Telus Supply-Chain Compromise Let Attackers In — and What to Hunt For

#crunchyroll #supplychain #tellus #breach
Comments
5 min read
The MCP Confused Deputy: Provenance Gaps, Instruction Injection, and DNS Rebinding in the Model Context Protocol
alejandxr profile

The MCP Confused Deputy: Provenance Gaps, Instruction Injection, and DNS Rebinding in the Model Context Protocol

#mcp #confuseddeputy #promptinjection #dnsrebinding
3
Comments
7 min read
North Korea's Lazarus Group Deploys RemotePE — A Memory-Only RAT That Leaves Zero Disk Traces
alejandxr profile

North Korea's Lazarus Group Deploys RemotePE — A Memory-Only RAT That Leaves Zero Disk Traces

#lazarus #apt #rat #filelessmalware
Comments
3 min read
CVE-2026-45659: SharePoint RCE Flaw Lets Any Site Member Execute Code Remotely
alejandxr profile

CVE-2026-45659: SharePoint RCE Flaw Lets Any Site Member Execute Code Remotely

#cve202645659 #sharepoint #rce #microsoft
Comments
4 min read
Iran's Nimbus Manticore Deploys AI-Assisted MiniFast Backdoor via Phishing and SEO Poisoning
alejandxr profile

Iran's Nimbus Manticore Deploys AI-Assisted MiniFast Backdoor via Phishing and SEO Poisoning

#nimbusmanticore #minifast #seopoisoning #phishing
Comments
4 min read
NGINX Rift: CVE-2026-42945 — An 18-Year-Old Heap Overflow Now Under Active Exploitation
alejandxr profile

NGINX Rift: CVE-2026-42945 — An 18-Year-Old Heap Overflow Now Under Active Exploitation

#nginx #cve202642945 #rce #heapoverflow
Comments
4 min read
TrapDoor: 34+ Malicious Packages Hit npm, PyPI, and Crates.io in Coordinated Supply Chain Attack
alejandxr profile

TrapDoor: 34+ Malicious Packages Hit npm, PyPI, and Crates.io in Coordinated Supply Chain Attack

#supplychain #npm #pypi #crates
Comments
4 min read
Gitea Container Registry Flaw Left 30,000 Private Image Repositories Wide Open for 4 Years
alejandxr profile

Gitea Container Registry Flaw Left 30,000 Private Image Repositories Wide Open for 4 Years

#cve202627771 #containersecurity #gitea #devops
3
Comments
4 min read
Free Scan or Full Pentest? A Decision Guide for Founders Shipping a Vibe-Coded MVP
alejandxr profile

Free Scan or Full Pentest? A Decision Guide for Founders Shipping a Vibe-Coded MVP

#pentest #freescan #startup #prelaunch
Comments
7 min read
June 2026 Patch Tuesday: An Actively-Exploited Chrome Zero-Day and a Wormable Windows RCE
alejandxr profile

June 2026 Patch Tuesday: An Actively-Exploited Chrome Zero-Day and a Wormable Windows RCE

#cve202611645 #cve202645657 #patchtuesday #chrome
Comments
2 min read
CVE-2026-42271: How a Popular AI Gateway Became an RCE Vector — And What to Audit in Your Stack
alejandxr profile

CVE-2026-42271: How a Popular AI Gateway Became an RCE Vector — And What to Audit in Your Stack

#cve202642271 #litellm #aigateway #commandinjection
Comments
3 min read
UNC6508: PRC Spies Exploit REDCap Servers to Infiltrate US Medical Research for 2 Years
alejandxr profile

UNC6508: PRC Spies Exploit REDCap Servers to Infiltrate US Medical Research for 2 Years

#prcespionage #redcap #unc6508 #medicalresearch
Comments
3 min read
Oracle E-Business Suite CVE‑2026‑46817: Critical Authentication Bypass in Oracle Payments
alejandxr profile

Oracle E-Business Suite CVE‑2026‑46817: Critical Authentication Bypass in Oracle Payments

#oracle #ebs #payments #cve202646817
Comments
2 min read
Microsoft SharePoint Server Remote Code Execution (CVE‑2026‑45659) Actively Exploited
alejandxr profile

Microsoft SharePoint Server Remote Code Execution (CVE‑2026‑45659) Actively Exploited

#sharepoint #cve202645659 #remotecodeexecution #microsoft
Comments
3 min read
Ubiquiti UniFi Critical Flaws Exposed: CVE-2026-50746 and Companion Vulnerabilities
alejandxr profile

Ubiquiti UniFi Critical Flaws Exposed: CVE-2026-50746 and Companion Vulnerabilities

#cve #ubiquiti #network
Comments
3 min read
Critical XSS Flaw in Zimbra Classic Web Client Enables Arbitrary Code Execution
alejandxr profile

Critical XSS Flaw in Zimbra Classic Web Client Enables Arbitrary Code Execution

#zimbra #xss #emailsecurity #cve
Comments
2 min read
loading...