I run a small security practice, spend too much time inside terminals, and write here about the infrastructure I build, the systems I take apart, and the projects in between.
I'm Adel, a Data & AI leader at BASF, driving global teams, data products, and platform transformation initiatives. Before that, I spent 13 years in cybersecurity across offensive security, incident response, cyber defense, and security leadership, helping organizations stay ahead of threats.
Outside client work, I'm usually neck-deep in a Linux box somewhere, provisioning cloud infrastructure, or fixing something I broke the night before. This site is where the smaller, more personal version of that work lives.
Red team engagements, penetration testing, and adversary simulation — finding the path an attacker would actually take, not just the checklist.
Hands-on Linux and cloud work — provisioning, hardening, and occasionally rebuilding infrastructure on OCI after I've broken it myself.
Digital forensics, incident response, and zero trust architecture — the unglamorous side of keeping systems standing after something goes wrong.
No posts match your search.
CVE-2026-77179: Docker Sandboxes virtio-fs symlink escape allowed malicious guest to read/write arbitrary macOS host files as VMM (CVSS 9.4 Critical).
read entry →CVE-2026-34040: Docker Engine authorization plugin bypass via oversized request body (>1 MB). AuthZ middleware silently drops body, plugin approves empty request, daemon executes privileged container creation. CVSS 8.8 High. Affects Docker Engine before 29.3.1.
read entry →CVE-2026-33997: Docker / Moby plugin privilege validation bypass due to off-by-one error. Affects Moby before 29.3.1. Plugins can gain unauthorized privileges. CVSS 6.8 Medium.
read entry →CVE-2026-53359 (Januscape): KVM shadow-MMU use-after-free in Linux kernel allows malicious guest to escape to Proxmox host. CVSS 8.8 High.
read entry →CVE-2026-51083: Proxmox VE Auth Bypass Vulnerability. Low-privilege users can access hashed passwords through the cloudinit/dump API. Affects PVE 8.x before 8.4.8 and 9.x before 9.1.8. Severity: 6.5 Medium. Patch and rotate credentials.
read entry →CVE-2026-32289: improper escaping of content in JS template literals in Tailscale allows XSS when template branches are used.
read entry →CVE-2026-71209 allows unauthenticated attackers to bypass authentication and read arbitrary files on Audiobookshelf via URL-encoded path traversal. Patch to latest version.
read entry →How Hermes automates daily vulnerability posts onto ciberdefensa.uk: cron 0 10 * * * searches CVEs, writes structured HTML, pushes to GitHub, and Vercel deploys automatically.
read entry →Proxmox PVE Race Condition Allows VNC Session Hijacking (CVE-2026-51082). Severity: High (7.2). Patch accordingly.
read entry →CVE-2024-21626 (Leaky Vessels / runc) allows container escape via leaked host file descriptor through /proc/self/fd. Patch runc to 1.1.12+.
read entry →CVE-2026-35031 is a vulnerability chain in Jellyfin subtitle upload allowing path traversal to RCE. Patch to 10.11.7.
read entry →Docker Desktop ECI Bypass (CVE-2026-6406). Severity: High (8.8). Patch accordingly.
read entry →CVE-2026-79766 (Termix SSH) — CVSS 9.1 Critical OS command injection via ACME/SSL admin input. Patch to 2.5.1.
read entry →A Firefox extension for Android that opens web videos in VLC. Detects videos, recovers real URLs from blob/MSE sources, and sends them to your default video player.
read entry →Proxmox V-GHOST (CVE-2026-74580) — Critical KVM Escape. Severity: High (8.6). Patch accordingly.
read entry →Setting up Scrutiny for SMART drive monitoring on Proxmox: an unprivileged LXC hub running the dashboard and InfluxDB, a collector on the host itself, and Telegram alerts before a disk actually dies.
read entry →How to backup your Oracle Cloud Always Free boot volumes with a simple zsh script that rotates a single full backup.
read entry →Deploying rcourtman/Pulse on Docker in my Oracle OCI Alpine box, wiring it up to Proxmox with a scoped API token, and turning on Patrol with OpenRouter as the brain.
read entry →Short field notes on managing services with OpenRC on Alpine Linux, coming from a systemd-shaped mental model.
read entry →Proxmox ZFS on consumer SSDs: why it can be a disaster and how to protect your drives.
read entry →