CVE-2026-110447: Hunt Collabora CODE Web Shells in Nextcloud
CISA lists CVE-2026-110447 as exploited. Scope the Nextcloud Built-in CODE app, preserve evidence, hunt web shells, and update or remove it safely.
VigilSecureInfo / Security engineering
Security intelligence
you can put to work.
Technical guides and threat analysis for defending Linux, cloud infrastructure, and detection pipelines.
Latest dispatches
04 guides- 01
- 02
- 03
- 04
Explore the knowledge base
Latest analysis
Guides, research, and practical steps from the archive.
Amazon Corretto October Updates: Audit and Patch Java Fleets
A practical guide to inventorying, testing, and deploying Amazon Corretto October security updates across Linux hosts, containers, and Java services.
CVE-2026-111943: Audit AWS Trust Stores After the eMudhra CA Failure
A practical AWS response guide for the eMudhra CA key compromise, covering affected trust roots, service deadlines, certificate-chain validation, and a tested offline triage lab.
CVE-2026-111497: Audit Brotli Exposure Across Node.js and Envoy
Map CVE-2026-111497 exposure across Node.js, Envoy, Python, and PAN-OS, then apply published fixes with a safe offline inventory lab.
CVE-2026-115893: Patch Wasmtime Sandbox Escape on Arm64
Audit Arm64 Wasmtime services for CVE-2026-115893, patch affected Cranelift branches, and validate sandbox controls with a safe offline inventory lab.
RUSTSEC-2026-0412: Patch cargo-nextest Recording RCE
cargo-nextest 0.9.125 through 0.9.149 can execute code from a malicious portable recording. Learn how to find exposure, patch CI runners, detect suspicious builds, and verify the fix safely.
Malicious Claude Code Cursor Extension: Hunt the SSH Backdoor
A malicious Claude Code-branded extension from the Cursor Marketplace attempted persistent SSH access. Learn how to scope exposure, preserve evidence, hunt indicators, remediate endpoints, and validate recovery.
Ivanti Connect Secure KEV Chain: Patch and Preserve Evidence
CISA added two Ivanti Connect Secure flaws to KEV. Use this defender-focused guide to inventory, preserve evidence, patch, validate integrity, and rotate trust material.
