The Exploit HQ

7 Critical Security Fixes You Need Today

Mon, 12 Oct 2026 12:01:07 GMT

7 stories: SonicWall SMA1000 Series appliances; Bricksforge WordPress plugin; Atlassian Data Center products; Citrix NetScaler ADC and NetScaler Gateway;…

Citrix NetScaler ADC Attacks Continue + 4 More Fixes

Sun, 11 Oct 2026 11:49:37 GMT

5 stories: Citrix NetScaler ADC and NetScaler Gateway; SonicWall SMA1000; Citrix NetScaler ADC and NetScaler Gateway; Ricardo (SMG Swiss Marketplace…

Fortinet FortiMail Under Active Attack + 3 More Fixes

Sat, 10 Oct 2026 13:16:32 GMT

4 stories: Fortinet FortiMail; Citrix NetScaler ADC and NetScaler Gateway; Cisco NX-OS; Microsoft Exchange Server.

Multiple Products Under Active Attack + 6 More Fixes

Fri, 09 Oct 2026 12:01:40 GMT

7 stories: Multiple Products (ProFTPD, ONLYOFFICE, Strapi, Apache Struts, ISC BIND); MonsterCloud; US Critical Infrastructure Sectors; Multiple Atlassian…

The 10 curl Commands Every Security Tester Uses in 2026

Thu, 08 Oct 2026 21:15:32 GMT

Every web app you have ever used will tell you things it should not, if you ask it the right way. No browser, no scanner, no special tools. Just curl,…

5 Critical Security Fixes for Oct 8

Thu, 08 Oct 2026 13:04:32 GMT

5 stories: Cisco NX-OS Software; Sompo Japan; IDCF Cloud; Nissui / Nissui Logistics; Daiichikosho.

Zammad GmbH Zammad Under Active Attack + 3 More Fixes

Wed, 07 Oct 2026 12:28:32 GMT

4 stories: Zammad GmbH Zammad; Langflow AI application-building platform; Various organizations targeted by phishing; Citrix NetScaler ADC and Citrix…

Fortinet FortiMail Under Active Attack + 4 More Fixes

Tue, 06 Oct 2026 12:13:07 GMT

5 stories: Fortinet FortiMail; Citrix NetScaler ADC and Gateway; Zammad; Atlassian Data Center products; Danish CPR system.

Zammad Under Active Attack + 4 More Fixes

Sat, 03 Oct 2026 17:50:42 GMT

5 stories: Zammad; Cisco Catalyst SD-WAN Manager; Citrix NetScaler ADC and Gateway; Rejetto HTTP File Server; Microsoft Exchange Server.

Fortinet FortiMail Under Active Attack + 2 More Fixes

Fri, 02 Oct 2026 15:11:08 GMT

3 stories: Fortinet FortiMail; Critical Infrastructure; Armatura One.

Apple CoreGraphics Under Active Attack + 6 More Fixes

Thu, 01 Oct 2026 15:35:18 GMT

7 stories: Apple CoreGraphics; Cisco Catalyst SD-WAN Manager; Citrix NetScaler ADC and Gateway; Zammad; MikroTik RouterOS; OpenSSL; Bitget.

Wireshark for Beginners Part 2 — Spot Suspicious Traffic on Your Network

Thu, 01 Oct 2026 04:37:17 GMT

Look at these five numbers. Something on this computer is quietly phoning home every two seconds, like clockwork, and Wireshark just caught it.

Citrix NetScaler ADC Under Active Attack + 2 More Fixes

Wed, 30 Sep 2026 15:26:12 GMT

3 stories: Citrix NetScaler ADC and NetScaler Gateway; Apple iOS, macOS, and iPadOS; Dockhand.

Citrix NetScaler ADC Under Active Attack + 3 More Fixes

Tue, 29 Sep 2026 14:50:46 GMT

4 stories: Citrix NetScaler ADC and Gateway; macOS Sequoia; Kiteworks; MCP Python SDK.

Citrix NetScaler ADC Under Active Attack + 4 More Fixes

Mon, 28 Sep 2026 15:24:26 GMT

5 stories: Citrix NetScaler ADC and NetScaler Gateway; Mikrotik RouterOS; WordPress Core; Citrix NetScaler ADC and NetScaler Gateway; Microsoft SharePoint.

5 Critical Security Fixes You Need Today

Sun, 27 Sep 2026 13:39:26 GMT

5 stories: Microsoft SharePoint, Mikrotik RouterOS; WordPress Core; WSO2 products, Adobe Commerce, Magento; G980H dash cam series; Omni C20 <1.6.4.

4 Critical Security Fixes You Need Today

Sat, 26 Sep 2026 16:33:49 GMT

4 stories: Check Point Security Gateway; Linux kernel (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964); Arista VeloCloud Orchestrator and Check Point…

4 Critical Security Fixes You Need Today

Fri, 25 Sep 2026 19:07:43 GMT

4 stories: MikroTik RouterOS; Bitget cryptocurrency exchange; MikroTik RouterOS, Microsoft SharePoint; Microsoft SharePoint.

JetBrains TeamCity Under Active Attack + 10 More Fixes

Thu, 24 Sep 2026 13:51:02 GMT

11 stories: JetBrains TeamCity; Arista VeloCloud Orchestrator (VCO) on-prem; Check Point Security Gateway and Spark Firewall; F5 BIG-IP APM; WordPress;…

12 Critical Security Fixes You Need Today

Tue, 22 Sep 2026 15:47:33 GMT

12 stories: VeloCloud Orchestrator on-prem; npm package indexed-btree; CrowdSec SaaS console; D-Link DIR-822A; Zyxel GS1900 Smart Managed Switches; Linux…

8 Critical Security Fixes You Need Today

Mon, 21 Sep 2026 15:48:45 GMT

8 stories: Gyazo image-sharing service / Helpfeel Inc.; ChainScript Node.js RAT; CrowdSec GitHub organization; U.S. and foreign law-enforcement and…

Wireshark Packet Sniffing for Absolute Beginners — Catching a Plaintext Login

Mon, 21 Sep 2026 12:40:05 GMT

Watch the terminal. In a few seconds you're going to watch a username and password cross the network in plain, readable text, caught live with nothing…

13 Critical Security Fixes You Need Today

Sun, 20 Sep 2026 16:52:54 GMT

13 stories: Cisco Identity Services Engine; Gyazo / Helpfeel; 3BB / FortiGate 60F SSL-VPN; Cisco AsyncOS Software for Cisco Secure Email Gateway; Google…

Microsoft Azure AI Foundry Developing Threat + 4 More Fixes

Sat, 19 Sep 2026 17:49:42 GMT

5 stories: Microsoft Azure AI Foundry; CrowdSec private GitHub repositories; SolarWinds Access Rights Manager; WaterPlum / Contagious Interview; Orkes…

3 Critical Security Fixes You Need Today

Fri, 18 Sep 2026 20:41:19 GMT

3 stories: Check Point Security Management and Log Server; Gyazo user data and image metadata; Microsoft Teams external-collaboration trust.

10 Linux Commands That Expose Hidden Malware

Wed, 16 Sep 2026 06:45:43 GMT

You do not need antivirus software to notice something is wrong on a Linux system. You need ten ordinary commands, and today we run every one of them for…

6 Critical Security Fixes You Need Today

Mon, 14 Sep 2026 18:19:44 GMT

6 stories: ConnectWise ScreenConnect, JFrog Artifactory, and MikroTik RouterOS; GitLab Community Edition and Enterprise Edition; Google Chromium V8 /…

The 10 Linux Commands Every Security Beginner Uses in 2026

Mon, 14 Sep 2026 15:28:56 GMT

Ten ordinary commands are the toolkit every security beginner actually lives in — not fancy exploits, just knowing your way around a Linux terminal.…

6 Critical Security Fixes You Need Today

Sun, 13 Sep 2026 22:59:37 GMT

7 stories: ConnectWise ScreenConnect, JFrog Artifactory, and MikroTik RouterOS; Microsoft Windows Update Stack and Windows ALPC; Check Point Quantum…

Practical Malware Analysis: The 10 Commands You Need in 2026

Sun, 13 Sep 2026 04:00:52 GMT

You do not need a malware lab to start analyzing a suspicious file. You need ten ordinary Linux commands, and today we run every one of them for real, on…

Authentication Bypass Explained — Web Application Security for Beginners

Mon, 07 Sep 2026 17:37:36 GMT

Welcome back to The Exploit HQ, and to part five of our beginner series on web application security. As always, you need zero experience to follow along.

Password Cracking Explained — See It Happen Live

Sat, 05 Sep 2026 02:47:38 GMT

Every password stored in a database is hashed — turned into a string of characters that looks like random noise. The idea is that it cannot be reversed.…

Web Application Security for Beginners — Start Here

Sat, 05 Sep 2026 01:50:48 GMT

Welcome to The Exploit HQ, and welcome to the Web Application Security course. Every app on the internet has an attack surface, and this course teaches…

XSS Explained — See a Website Get Hijacked Live

Fri, 04 Sep 2026 22:25:38 GMT

Cross-site scripting is one of the oldest vulnerabilities on the web — and once you see it happen, you will never trust a search box or a URL parameter…

How SQL Injection Works — See It Happen Live

Fri, 04 Sep 2026 20:50:39 GMT

SQL injection is one of the most searched vulnerabilities on the web — and once you see it happen, you will never look at a login form the same way…

Parameter Tampering Explained — Web Application Security for Beginners

Fri, 04 Sep 2026 19:07:34 GMT

Welcome back to The Exploit HQ, and to part four of our beginner series on web application security. As always, you need zero experience to follow along.

Kali Linux for Absolute Beginners — Your First Hour in the Terminal

Wed, 02 Sep 2026 04:04:11 GMT

Kali Linux is the operating system that security professionals use for penetration testing and ethical hacking — and in this video, you're going to learn…

Information Disclosure Vulnerabilities Explained — Web Application Security for Beginners

Sat, 29 Aug 2026 16:48:33 GMT

Welcome back to The Exploit HQ, and to part three of our beginner series on web application security. As always, you need zero experience to follow along.

The 10 Commands That Show You How Vulnerability Scanning Works in 2026

Fri, 28 Aug 2026 16:21:19 GMT

Everyone talks about vulnerability scanning like it is one magic button. It is not. It is a chain of small, ordinary steps, and today we run every one of…

The 10 Nmap Commands Most Used in 2026

Fri, 28 Aug 2026 05:59:40 GMT

Welcome to The Exploit HQ. Today, the ten Nmap commands you will actually reach for in twenty twenty-six, each one explained piece by piece, and each one…

File Inclusion & Path Traversal — Web Application Security for Beginners (LFI/RFI)

Mon, 24 Aug 2026 16:52:13 GMT

Welcome back to The Exploit HQ, and to part two of our beginner series on web application security. Just like last time, you need zero experience to…

Broken Access Control & IDOR — Web Application Security for Beginners

Sun, 23 Aug 2026 04:01:20 GMT

Welcome to The Exploit HQ, and to a brand new beginner series on web application vulnerabilities. This is part one, and you need zero experience to…

Nmap for Beginners: Save & Read Your Scan Results (-oN, -oA)

Fri, 21 Aug 2026 23:14:05 GMT

Welcome back to The Exploit HQ. This is part six of our beginner Nmap series, and, as always, you need zero experience to follow along.

Nmap for Beginners: Scan Only the Ports You Want (Faster Scans)

Tue, 18 Aug 2026 20:41:50 GMT

Welcome back to The Exploit HQ. This is part five of our beginner Nmap series, and as always, you need zero experience to follow along.

Nmap for Beginners: Scan Your Whole Home Network (Part 4)

Mon, 17 Aug 2026 20:06:12 GMT

Welcome back to The Exploit HQ. This is part four of our beginner Nmap series, and as always, you need zero experience to follow along.

Nmap for Absolute Beginners: Open, Closed & Filtered Ports

Sun, 16 Aug 2026 18:09:11 GMT

Welcome back to The Exploit HQ. This is part three of our beginner Nmap series, and just like before, you need zero experience to follow along.

Nmap for Beginners: What's Running Behind Open Ports (Part 2)

Thu, 13 Aug 2026 21:56:20 GMT

Welcome back to The Exploit HQ. This is part two of our beginner Nmap series, and you still need zero experience to follow along.

Nmap for Absolute Beginners: Your First Scan

Wed, 12 Aug 2026 18:14:19 GMT

Welcome to The Exploit HQ. This is a tutorial for absolute beginners, and you need zero experience to follow along.