Exploited NetScaler RCEs: Patch and Investigate CVE-2026-88771/88772
Citrix and CISA confirm active exploitation of two NetScaler RCE flaws. Check affected builds, preserve evidence, and plan a verified response.
VigilSecureInfo / Security engineering
Security intelligence
you can put to work.
Technical guides and threat analysis for defending Linux, cloud infrastructure, and detection pipelines.
Latest dispatches
04 guides- 01
- 02
- 03
- 04
Explore the knowledge base
Latest analysis
Guides, research, and practical steps from the archive.
CISA KEV Vulnerability Prioritization After the Weekly Bulletin
CISA retired its Weekly Vulnerability Bulletin. Build a KEV-first prioritization workflow with asset context, automation, and a safe hands-on lab.
CISA’s Tale of Two SOCs: Detection Lessons That Matter
CISA’s Tale of Two SOCs shows why alert tuning, response authority, identity monitoring, and cloud token controls determine whether a SOC stops an intrusion.
AI-Assisted Fuzzing: GitHub’s Taskflow Agent in Practice
Explore GitHub Security Lab’s AI-assisted fuzzing workflow for C/C++, including its coverage loop, crash triage, a safe cJSON lab, and key limitations.
mkcert: Create Locally Valid HTTPS Certificates on Debian
Create locally trusted HTTPS certificates on Debian with mkcert. Secure localhost and LAN development without browser certificate warnings.
SharedRoot: The Real Risk of Shared Filesystem Access in Containerized AI Workloads
Understand how shared host filesystems and container volumes can expose AI agents to data theft and unintended actions, with practical isolation controls.
How to Install Wazuh SIEM and Write Custom Detection Rules (2026)
Install Wazuh SIEM on one host, enroll agents, and write custom detection rules that survive upgrades. Step-by-step 2026 tutorial with tested commands.
FortiBleed: Inside the Massive Cyber Attack That Compromised 86,644 Fortinet Firewalls
The FortiBleed campaign compromised credentials for 86,644 Fortinet FortiGate firewalls across 194 countries in June 2026. Learn how the attack worked, who was hit — Samsung, Oracle, NATO — and how to remediate now.
