Samit Hota 

#CyberSecurityResearcher, #YouTuber , #Blogger #HackerOne #BugCrowd

[Samit Hota  @HotaSamit]

CVE-2026-111793: Openwave Webtop Media Transcoder Resource Boundary Flaw

Analysis of CVE-2026-111793, an incorrect resource transfer flaw in Openwave Messaging Webtop Media Transcoder…

Full write-up → link in bio
#cybersecurity #infosec #cve #kev #OpenwaveMessagingLimited

[Samit Hota  @HotaSamit]

Catching Web Server RCE in the Kernel: Hands-On eBPF Syscall Tracing

Build an eBPF detection tool using bpftrace to catch anomalous execve and connect syscalls from web application…

Full write-up → link in bio
#infosec #cybersecurity #ebpf #LinuxSecurity #ThreatDetection

[Samit Hota  @HotaSamit]

Cisco BroadWorks XXE Flaw Exposes Sensitive Telecom Configurations (CVE-2026-20320)

Unauthenticated XXE in Cisco BroadWorks (CVE-2026-20320) allows remote attackers to read sensitive internal system files…

Full write-up → link in bio
#cybersecurity #infosec #cve #kev #cisco

[Samit Hota  @HotaSamit]

Barracuda ESG Auth Bypass (CVE-2026-116606) Allows Appliance Hijack

Barracuda Networks issued mitigations for CVE-2026-116606, an authentication bypass in Barracuda Email Security Gateway…

Full write-up → link in bio
#cybersecurity #infosec #cve #kev #BarracudaNetworks

[Samit Hota  @HotaSamit]

CVE-2026-111560: Barracuda Fixes Root Command Injection Flaw Across Appliance Portfolio

A critical OS command injection vulnerability (CVE-2026-111560) in Barracuda appliances allows root…

Full write-up → link in bio
#cybersecurity #infosec #cve #kev #BarracudaNetworks

[Samit Hota  @HotaSamit]

Deep Container Telemetry: Building eBPF Detection Rules That Don't Flinch

A practical guide to bypassing user-space limitations using eBPF for deep container telemetry and writing…

Full write-up → link in bio
#infosec #cybersecurity #ebpf #CloudSecurity #containers

[Samit Hota  @HotaSamit]

Google Chromium Use-After-Free Vulnerability (CVE-2026-125350)

Google released updates for a high-severity Chromium use-after-free vulnerability (CVE-2026-125350) affecting Chrome, Edge, and Opera browsers.

Full write-up → link in bio
#cybersecurity #infosec #cve #kev #google

[Samit Hota  @HotaSamit]

Auditing gRPC APIs: Schema Reflection, Fuzzing, and Auth Flaws

Learn how to enumerate, test, and harden gRPC services against schema exposure, protobuf fuzzing, and broken authorization.

Full write-up → link in bio
#infosec #cybersecurity #grpc #ApiSecurity #pentesting

[Samit Hota  @HotaSamit]

Critical FreeSWITCH Code Injection Vulnerability Exposes Telephony Infrastructure

CVE-2026-116779 allows unauthenticated attackers to execute arbitrary commands and extract credentials on SignalWire…

Full write-up → link in bio
#cybersecurity #infosec #cve #kev #signalwire

[Samit Hota  @HotaSamit]

LLMs Didn't Change Phishing Telemetry—They Just Killed Bad Text Rules

Why open-source LLMs render grammar-based mail checks useless and how to retune email security around durable…

Full write-up → link in bio
#infosec #cybersecurity #phishing #BlueTeam #defender365

[Samit Hota  @HotaSamit]

IBM Aspera Faspex Critical Authorization Bypass (CVE-2026-123218)

IBM has addressed a critical authorization bypass vulnerability (CVE-2026-123218) in Aspera Faspex that allows unauthenticated privilege…

Full write-up → link in bio
#cybersecurity #infosec #cve #kev #ibm

[Samit Hota  @HotaSamit]

Blinding the Watcher: Mechanics and Detections for EDR Tampering and BYOVD

Learn how attackers blind EDR agents using BYOVD, service stopping, and ETW patching, along with…

Full write-up → link in bio
#infosec #cybersecurity #DetectionEngineering #edr #WindowsSecurity

[Samit Hota  @HotaSamit]

SonicWall Patches SonicOS MFA Bypass Flaw Exploit Targeted in Real-World Attacks

SonicWall issues updates for a high-severity SonicOS SSL-VPN MFA bypass flaw (CVE-2026-19868) actively…

Full write-up → link in bio
#cybersecurity #infosec #VulnerabilityDisclosure #sonicwall

[Samit Hota  @HotaSamit]

Threat Actor Uses BOSSAI AI Agents to Exfiltrate Taipei Emergency Dispatch Records

A single threat actor deployed local abliterated AI agents to breach Taipei emergency dispatch systems, Taiwanese…

Full write-up → link in bio
#cybersecurity #infosec #DataBreach #bossai

[Samit Hota  @HotaSamit]

Iris Ohyama Data Breach Exposes 7.7 Million Iris Plaza Customer Records

Japanese manufacturer Iris Ohyama suspended its Iris Plaza store after unauthorized third-party access to its cloud environment…

Full write-up → link in bio
#cybersecurity #infosec #DataBreach #iris

[Samit Hota  @HotaSamit]

Catching Cryptojackers in Kubernetes: PromQL, Hubble, and Falco Detection

Learn how to detect and isolate hidden cryptojacking workloads in Kubernetes using PromQL, Cilium Hubble network…

Full write-up → link in bio
#infosec #cybersecurity #kubernetes #CloudSecurity #falco

[Samit Hota  @HotaSamit]

Poisoned cPGuard Update Compromises 3,000 Web Hosting Servers

Attackers breached OPSShield's cPGuard update infrastructure, deploying malicious code to nearly 3,000 servers and exfiltrating customer data.

Full write-up → link in bio
#cybersecurity #infosec #DataBreach #cpguard

[Samit Hota  @HotaSamit]

Catching Quishing and AiTM MFA Bypass: A Telemetry-Driven Detection Playbook

Build production-ready detection rules for QR code phishing and Evilginx AiTM proxies by correlating identity…

Full write-up → link in bio
#infosec #cybersecurity #ThreatIntelligence #phishing #kql

[Samit Hota  @HotaSamit]

Poisoned cPGuard Update Compromises Thousands of Linux Web Hosting Servers

Attackers breached OPSShield's cPGuard update infrastructure, deploying malicious updates to nearly 3,000 servers and stealing…

Full write-up → link in bio
#cybersecurity #infosec #DataBreach #cpguard

[Samit Hota  @HotaSamit]

Crédit Mutuel Arkéa Suffers $133M Cyber Attack via Service Provider

Attackers accessed Crédit Mutuel Arkéa through a third-party service provider, stealing up to $133 million via internal…

Full write-up → link in bio
#cybersecurity #infosec #VulnerabilityDisclosure #credit