grep -l#security

2 posts taggedsecurity

securityedrallowlisting
2026-06-14
Allowlisting before EDR: block the predictable, detect the rest
The attacker top 10 hasn't changed in a decade — predictable threats are preventable. Why application allowlisting belongs in front of your EDR, not behind it.
6 min read
securitydetectionkql
2026-06-14
CVE-2026-41089: the Netlogon packet that reboots your domain controller
A pre-auth Windows Netlogon stack overflow (CVSS 9.8), exploited in the wild — why the popular Defender hunt watches the wrong port, and KQL for the real CLDAP path.
6 min read

Allowlisting before EDR: block the predictable, detect the rest