NEONPALADIN
Ingénieur en résilience cyber
Profil professionnel
Connu pour la méthodologie Lumina, NeonPaladin révèle les surfaces d’attaque cachées. Ingénieur sécurité avec une expérience en data analytics et en ML appliqués à la défense.
Compétences clés
Modélisation de la résilience cyber; visualisation de la surface d’attaque; réglage avancé de SIEM; analytics comportementales; conception de base zero-trust
Réalisations majeures
Refonte du modèle de risque d’un groupe d’assurance, réduisant les faux négatifs de 40 %; développement d’un moteur de corrélation comportementale adopté par deux SOC nationaux.
Articles de NEONPALADIN
The Quiet API That Turned a Splunk Cluster Into a Command Surface
A critical flaw in Splunk Enterprise shows how a management API inside clustered deployments can become the real attack path, not the dashboard users see.
Citrix Gateway Under Pressure as a Pre-Auth Bug Becomes a Foothold Problem
CVE-2026-88771 is being linked to command execution, reverse shells, and persistence on NetScaler appliances, showing how a perimeter flaw can quickly turn into a trust-boundary crisis.
Inside the Cluster: A Hidden Splunk Control API Carried Critical Command Risk
A management interface tied to Splunk Enterprise search head clustering created a high-severity command-execution path, showing why sidecar services deserve the same scrutiny as the main product.
Gitea’s Patch Wave Exposes a Larger Trust-Chain Problem
A 20-fix security release shows how identity checks, CI approvals, and outbound network controls can fail together in self-hosted Git systems.
Root-Level Risk on Cisco Nexus Switches Puts Packet Paths Under Scrutiny
Three critical flaws in Cisco Nexus 3000 and 9000 switches can let an unauthenticated attacker execute code as root when specific NX-OS features are enabled.
One Deserialization Mistake Turned a Cache Transport into a Code-Execution Risk
LMCache’s CVE-2026-105192 shows how a network-facing control channel can become dangerous when Python pickle is used on attacker-reachable data.
Critical Flaws Push SonicWall and Splunk Into Emergency Patch Mode
Two vendors moved to fix high-risk vulnerabilities that could let an attacker bypass authentication, run arbitrary code, or climb to higher privileges.
When a Helpdesk Session Becomes a Shell: Zammad’s New Exploit Warning
A proof-of-concept for CVE-2026-102489 has sharpened concern that a web session problem in Zammad could spill from account takeover into server-side control on some self-hosted deployments.
Brocade’s Patch Flood Signals a Wider SAN Risk Window
A security notice covering Fabric OS, SANnav, and ASCG points to 61 fixed vulnerabilities, including 37 rated high severity, and reminds defenders that storage management planes are part of the attack surface.
When DNS Turns Into a Trust Problem Inside Docker
Security updates for Docker Engine and the Moby Go codebase address a high-severity DNS-handling flaw that could put container registry traffic, credentials, and image integrity at risk under the wrong conditions.
When a Switch Becomes the Target: Cisco’s NX-OS Flaws Put Core Fabric Software Under the Microscope
Five critical NX-OS vulnerabilities show how a network switch can become a high-value attack surface, especially when management and automation features sit close to the control plane.
Cisco NX-OS Flaws Put Data Center Switch Trust on the Line
Cisco disclosed four critical vulnerabilities in NX-OS, the software behind Nexus switches, with a worst-case outcome of arbitrary code execution with root-level privileges.
Solar Cloud Lockout: A Login Flaw That Put Control at the Edge of Power Infrastructure
A critical authentication bypass in Sungrow’s iSolarCloud shows how a single weakness in a management layer can threaten far more than account privacy.
When a Login Shortcut Touches the Power Grid
A critical auth bypass in Sungrow’s iSolarCloud shows how a cloud identity bug can threaten the control plane behind solar operations, even when regional data is separated.
Citrix’s Edge Warning: A Critical NetScaler Flaw Hides Behind SAML Settings
A memory overflow in NetScaler ADC and NetScaler Gateway shows how a critical bug can stay configuration-gated until the wrong identity role turns it into a serious edge risk.
A Remote-Access Gateway With the Wrong Kind of Reach
SonicWall has patched a maximum-severity SSRF issue in SMA1000 appliances, a reminder that trust-boundary devices can become dangerous if they can be steered into making unintended requests.
SonicWall Patch Wave Exposes a Bigger Question: Who Controls the Remote-Access Gate?
Four SMA1000 flaws, including one critical and two high-severity issues, put the appliance’s trust boundary under pressure where defenders need it most.
Android’s October Patch Tightens a Dangerous Privilege Boundary
Google’s October 2026 security bulletin closes 25 Android flaws, including a critical System-component issue that could let code climb beyond its intended permissions.
Google Slams the Brakes on Its Open-Source Bounty Pipeline
A surge of automated vulnerability reports pushed Google to pause intake for its open-source rewards program, exposing a growing triage problem in modern bug bounty systems.
IBM’s Java Flaw Hunt Points to a Bigger Supply-Chain Problem
An AI-powered vulnerability clearinghouse found hundreds of Java flaws, but the deeper story is how modern patching now depends on trust, validation, and dependency control.