Meet vRx: From Exposure to Closure (and more!) nitter.siddz.com/i/broadcasts/1nGnRRMvY…

It is said Odysseus landed on the island of Print Spooler 📜 _____ CVE of the Week CVE-2026-58608: High-Severity RCE Vulnerability in Windows Print Spooler Caused by improper synchronization and race condition flaws (CWE-362 / CWE-416), this vulnerability allows an authenticated, low-privileged attacker to execute arbitrary code over the network without requiring any user interaction. Why it matters: - Remote code execution (RCE) with elevated privileges on target Windows endpoints and servers. - Complete host compromise and unauthorized access to corporate network resources. Recommended actions: 1. Install the official July 2026 Patch Tuesday security updates across affected Windows 10, Windows 11, and Windows Server systems. 2. Disable the Print Spooler service on critical servers. Use these scripts from the Vicarius research team: - Detection: vicarius.io/vsociety/posts/c… - Remediation: vicarius.io/vsociety/posts/c… Let us know if you need help securing your systems or understanding these steps further. Shoutout to @orange_8361 for the discovery!

You deserve the vacation!! 🌴 linkedin.com/events/74831844…

Guess who's back? (Or rather, what's back 😅) Cybersecurity information sharing between government and private sector! David and Captain Patches break down the @DHSgov's new council, ANCHOR-CI, and what it entails for operators of water, power, internet and telecomms.

Exposed and Unfixed: The State of Vulnerability Remediation nitter.siddz.com/i/broadcasts/1nKOLLZzR…

If your digital lettuce is contaminated, don't worry, we have many ways to reduce risk, with or without a patch. Join us on July 30 to learn how: linkedin.com/events/74831844…

Well, it was only a matter of time. Agentic ransomware is here. Thank you @sysdig for the research

Just because an OT controller or rogue server can't run a traditional security agent doesn't mean it gets a free pass 🙅‍♂️ Learn how vRx combines agent-based management and agentless discovery to inventory, monitor, and secure every asset across your environment. (They can run but they can't hide!) linkedin.com/pulse/how-vrx-m…

Imagine a tool that reproduces a vulnerability in an isolated lab and proves the remediation works before it ever touches your production environment 🤯 This edition outlines the vision for that tool (VulnGPT) and the impact of frontier AI models becoming increasingly restricted. linkedin.com/pulse/part-3-au…

Autonomous ransomware is here, and with FedRAMP 2026 mandates forcing a shift to real-time compliance, static security is officially a liability. This week on Last Week in Cyber, David and Captain Patches break down what the new DHS ANCHOR-CI council means for critical infrastructure and how to survive the era of "ghost ship" attacks.

Yikes 🫣 _____ CVE of the Week CVE-2026-49160: High-Severity Denial of Service (DoS) Vulnerability in Windows HTTP.sys This zero-day flaw exposes vulnerable systems to an "HTTP/2 Bomb" attack, where an unauthorized, remote attacker can send a tiny, specially crafted HTTP/2 request that expands rapidly in memory, triggering uncontrolled resource consumption. Why it matters: - Instantaneous crashing of critical, adjacent services sharing the driver. - Complete infrastructure disruption with zero user interaction required. Recommended actions: 1. Install the latest security updates released by Microsoft. 2. If patching must be delayed, consider adjusting web server configurations (such as reducing MaxRequestBytes) to mitigate memory amplification risks. Use this mitigation script to implement the workaround: vicarius.io/vsociety/posts/c… Let us know if you need help securing your systems or understanding these steps further!

As Sir Issac Newton said, "for every action, there is an equal and opposite reaction." Our reaction to AI-generated code? Counter-force AI to match machine-speed risk with machine-speed containment. vIntelligence turns AI’s speed into a defensive advantage rather than a liability.

If you’re looking to reduce your attack surface without the weekend emergency maintenance, start by simplifying your configurations. Here's how we're mitigating CVE-2026-46333, CVE-2026-49160, and CVE-2026-53435. linkedin.com/pulse/issue-20-…

Common, everyday tasks that take 30 seconds to complete: - washing your hands - mitigating CVEs with vRx

We've been accepted into Anthropic's Cyber Verification Program, allowing us to leverage Claude's full offensive security context to deliver smarter, faster remediation. Here is what the clearance unlocks for us: linkedin.com/pulse/vicarius-…

In this episode, David and Sagy discuss CISA's aggressive 3-day patch mandate, Anthropic expanding invitations for its exclusive operational technology group Project Glasswing, and OpenAI’s "Patch the Planet" initiative. @joshcorman

SPOILER ALERT: We've been cleared! Today we were accepted into Anthropic’s Cyber Verification Program, gaining access to the full dual-use capabilities of Claude. We’re using this access at the internal research layer to feed advanced exploit analysis and remediation logic directly into vRx. Blog drops tomorrow ⏱️

vRx: The new playbook for exposure management nitter.siddz.com/i/broadcasts/1DxLddXDX…

We’re seeing a pattern across the entire stack. From Windows kernel-mode drivers to @marimo_io notebooks, critical exploits are rooted in the same miscalculation: granting trust without verification. You don't have to live with that liability. linkedin.com/pulse/issue-19-…

Tough 😤 _____ CVE of the Week CVE-2026-47291: Critical Remote Code Execution in Windows HTTP.sys A critical-severity RCE vulnerability has been identified in the Windows HTTP Protocol Stack kernel-mode driver. This integer overflow vulnerability carries a maximum CVSS score of 9.8 and allows unauthenticated, remote attackers to execute arbitrary code with systemic administrative authority. 💡 Why it matters: - No authentication, credentials, or user interaction are required. - Because http.sys runs within the Windows kernel, successful exploitation yields immediate, unauthenticated code execution at the SYSTEM level. 🛠️ Recommended actions: 1. Prioritize the deployment of the June 2026 Microsoft Patch Tuesday cumulative security updates across all Windows Server and workstation endpoints. 2. Check and limit the MaxRequestBytes parameter registry value under HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters to enforce safe constraints on inbound HTTP requests. In cases where patches cannot be applied, use these scripts to reduce exposure: Detection: vicarius.io/vsociety/posts/c… Remediation: vicarius.io/vsociety/posts/c… Stay proactive, and let us know if you need help securing your infrastructure.