John Z Black
Brunswick, ME • (207) 245-1010 • contact@johnzblack.com
MoveIt Redux: Progress Software Battles a New Wave of RCE Flaws
New critical RCE vulnerabilities in MoveIt WAF and LoadMaster let attackers reach the management shell and bypass security controls entirely. Your patch window is hours, not days.
Read More
Management Planes: The Internet's Industrialized Front Door
Hackers have stopped chasing individual servers. They are after the tools that manage thousands of them at once. BeyondTrust, Palo Alto, and Cisco are the current bulls-eye.
Read More
The CI/CD Supply Chain Crisis: Poisoning the Well at the Source
Attackers are ignoring the database and going for the person writing the code. Bamboo, GitLab, and Spinnaker are facing critical flaws that turn your build tools into weapons.
Read More
9 Hours 41 Minutes: The Patch Window Is Gone
CVE-2026-39987 in Marimo was exploited less than 10 hours after the advisory dropped. No public PoC. The attacker built their own exploit from the description and went to work while most people were still reading their alerts.
Read More
An AI Found a 13-Year-Old RCE in ActiveMQ in 10 Minutes
CVE-2026-34197 sat undetected in Apache ActiveMQ for 13 years. Claude found it in 10 minutes by tracing a cross-subsystem exploit chain no human auditor had connected.
Read More
Three CVEs in Flowise, a Prompt Injection in Grafana, and the Growing Case That Your AI Stack Is the Target
Flowise has a perfect 10.0 CVSS under active exploitation. GrafanaGhost injects prompts through metric names. The attack surface isn't the AI model. It's everything around it.
Read More
Claude Found RCEs in Vim and Emacs. Only One Got Patched.
A researcher used Claude to find file-open RCEs in both Vim and Emacs. Vim patched immediately. Emacs says it's Git's problem. Meanwhile, leaked details of Anthropic's 'Mythos' model suggest AI offensive capabilities are approaching nation-state level.
Read More
Three Vendors, Three Critical Bugs, All Exploited This Week: The Edge Device Emergency
F5 BIG-IP, Citrix NetScaler, and Fortinet FortiClient EMS all have critical vulnerabilities under active exploitation this week. Here's what happened and what you need to do right now.
Read More
So Bad That German Police Knocked on Doors: The PTC Windchill Flaw Now in CISA's KEV
A critical RCE flaw in PTC Windchill hit CISA's KEV with no patch available yet, and German police started showing up at factory doors in person to warn companies.
Read More
Patch Weekend Is Here: Why Oracle IAM and Cisco FMC Can't Wait
Oracle pushed an emergency out-of-band patch for a critical identity manager RCE. CISA set a Sunday deadline on a max-severity Cisco firewall management flaw. Both hit identity and perimeter management simultaneously.
Read More
AI Exploits in Hours: The Patch Window Just Collapsed
Rapid exploitation plus cross-platform AI exposure means next-sprint patching is no longer a safe operating model.
Read More
Patch Alert: Wing FTP Exploited, Two Patch Tuesday Zero-Days, and a D-Link RCE That Doesn't Need a Login
Three vulnerability disclosures in one week across different parts of the stack. Wing FTP is actively exploited, March Patch Tuesday dropped two zero-days, and D-Link has an unauthenticated RCE in its DNS config.
Read More
Two Vulnerabilities, Two Patches, One Message: Critical Enterprise Flaws Need Immediate Attention
Microsoft shipped an emergency out-of-band RRAS patch days after Patch Tuesday. HPE has a switch vulnerability that lets attackers reset admin passwords with zero credentials. Both need patching now.
Read More
Veeam Has Seven Critical RCE Flaws and Ransomware Operators Are Paying Attention
Seven simultaneous unauthenticated RCE vulnerabilities in Veeam Backup & Replication. This is a ransomware operator's wishlist, and it all dropped at once. Patch now.
Read More