Netcrook
#Attack surface
When Old Code Disappears, So Do the Clues It Left Behind
A look at a virtual graveyard of retired tech becomes a useful reminder that digital retirement is a security event, even when no breach is involved.
How an 8-Bit Microcontroller Turned into a Web Service
An AVR board serving web pages is a useful reminder that once even tiny hardware speaks HTTP, it inherits the discipline, and the exposure, of any networked service.
The Dangerous Myth That a Breach Makes You Safer
A cyber incident is not a badge of immunity - it can be a warning that the same organization remains vulnerable to another hit.
Windows 11 Build 26300 Quietly Expands the Places Administrators Must Trust
Microsoft’s latest Insider Experimental Preview adds screen tint, voice isolation, and plug-and-play Braille display support, a reminder that even accessibility updates can widen the number of interfaces that need careful handling.
Roundcube’s Hidden Lookup Path Became the Weakest Link
A critical pre-authentication SQL injection in Roundcube’s database-backed lookup logic shows how an optional feature can widen the attack surface of a webmail platform before any login happens.
When AI Finds Bugs Faster Than Teams Can Fix Them
Anthropic’s Mythos and Project Glasswing have sharpened one uncomfortable lesson: vulnerability discovery is no longer just a security function, because remediation now lives in code, services, APIs, and ownership.
When AI Finds the Crack Before the Patch Lands
Machine-speed vulnerability discovery is shrinking the time defenders have to react, pushing security teams toward Zero Trust, deception, and automated containment.
The Security Wall Did Not Disappear - It Changed Shape
A 20th-anniversary retrospective on cybersecurity shows why the old perimeter mindset is no longer enough, and why AI-native systems now sit inside the blast radius.
Five Samba Flaws, One Hard Lesson: Patch Faster Than Attackers Can Map the Share
ACN CSIRT Italia has flagged five newly patched Samba vulnerabilities, and the real risk is not just severity - it is how quickly exposed services can turn a routine update into an incident response problem.
New Zealand’s AI Alarm Points to a Bigger Cyber Problem Hiding in Plain Sight
Wellington is treating AI risk as a security question, not a hype cycle, and that shift matters because modern AI systems can widen the attack surface long before any breach occurs.
When a Shortcut Pretends to Be a Notice, the Real Payload Can Hide in Plain Sight
Operation Dragon Whistle shows how a tailored university-themed lure, a disguised Windows shortcut, and Cobalt Strike can be chained into a focused phishing operation against China’s education sector.
The Driver That Still Answers: Why Windows Hardware Gaps Don’t Always Close the Door
A technical look at how a Windows kernel driver can remain reachable from user mode even when the hardware it was built for is absent, and why that matters in BYOVD-style risk analysis.
Silent Control Plane: A Critical Cisco API Flaw Puts the Hidden Layer in the Spotlight
A maximum-severity weakness in Cisco Secure Workload shows how a backend API can become the real attack surface, even when the web console looks fine.
Australia’s Data Centre Boom Is Quietly Becoming a National Resilience Test
Hyperscale buildouts are no longer just an IT story; they are pushing power, cooling, connectivity, and regulation into the same security conversation.
The New Cyber Divide: When AI Skills Become a Security Control
Hack The Box and ISC2 point to a workforce shift where AI is simultaneously a defensive accelerator, a training priority, and a fresh attack surface.
When Trust Becomes the Attack Surface
A weekly threat roundup points to a harder problem for defenders: intrusions that try to blend into the systems, accounts, and workflows people already trust.
When Language Becomes the Attack Path: The New Security Problem Inside AI Systems
Prompt injection and model poisoning show that the weak point in generative AI is often not the model’s math, but the trust boundary around what it reads, remembers, and acts on.
A Metadata Tool Turns Dangerous on macOS When One Field Is Enough
A flaw in ExifTool can expose certain macOS file-processing workflows to command execution through crafted image metadata, showing how trusted automation can become an attack surface.
The Booth Talk That Reveals a Bigger Shift in Exposure Defense
Criminal IP’s planned return to Infosecurity Europe 2026 points to a market where attack surface management is being sold less as a scan-and-list tool and more as a threat-informed decision engine.
When the Alert Queue Becomes the Battlefield
AI is not just changing how defenders work; in critical infrastructure, it is changing how fast both sides can move.