Mastering Cybersecurity Together
Learn security one story at a time.
Easy-to-understand explainers with examples, from attack surfaces and risk to the vulnerabilities and scams making headlines.
Latest episodes
watch on YouTube
Foundations
think like a defender
Attack vector, attack surface & exposure management
Vector vs surface, ASM/EASM, and Gartner's CTEM loop.
02Risk assessment: likelihood × impact
Impact categories, a 3-question likelihood check, and reducing uncertainty.
03Threat modeling with four questions
Shostack's Four Question Framework, with a tiny worked example.
04CISA KEV vs EPSS: lagging and leading signals
Why KEV confirms after the fact and EPSS forecasts, and how to use both.
Famous vulnerabilities
how headline bugs actually work
Heartbleed (CVE-2014-0160)
An OpenSSL bug that leaked server memory, private keys included.
KEV: Yes 06Shellshock (CVE-2014-6271)
Bash ran commands hidden after a function definition in an environment variable.
KEV: Yes 07EternalBlue, WannaCry & NotPetya (MS17-010)
The SMBv1 flaw behind WannaCry and NotPetya, two of the costliest attacks ever.
KEV: Yes 08Apache Struts & the Equifax breach (CVE-2017-5638)
One unpatched web portal, 76 days of access and about 147 million people's data.
KEV: Yes 09Spectre & Meltdown (2018)
Hardware flaws that let programs read memory they should never see.
10Zerologon (CVE-2020-1472)
A Netlogon flaw that took over Windows domain controllers in seconds.
KEV: Yes 11ProxyLogon (CVE-2021-26855)
A chain of Exchange zero-days exploited by at least ten hacking groups.
KEV: Yes 12Log4Shell (CVE-2021-44228)
A logging library that fetched and ran code from a string.
KEV: Yes 13MOVEit Transfer mass hack (CVE-2023-34362)
Cl0p's data-theft campaign through a file-transfer product.
KEV: Yes 14Citrix Bleed (CVE-2023-4966)
NetScaler leaked session tokens, so attackers skipped passwords and MFA.
KEV: 18 Oct 2023 15xz Utils backdoor (CVE-2024-3094)
A patient supply-chain attack on an open-source maintainer, found by chance.
16regreSSHion (CVE-2024-6387)
A fixed OpenSSH race condition, accidentally reintroduced in 2020.
17React2Shell (CVE-2025-55182)
Unauthenticated RCE in React Server Components, used by China-nexus groups.
KEV: 5 Dec 2025 18PwnEscape (CVE-2026-99999)
A Linux kernel networking flaw that lets a guest VM attack its host.
Not in KEV 19PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Two pre-auth RCE bugs in the PHP engine, exploited within days.
KEV: 26 Oct 2026 20Brotli2Shell (CVE-2026-111497)
Node2Shell / HTTP2Shell: an out-of-bounds write in Google's Brotli decoder.
KEV: 27 Oct 2026▶ Video 21SSHole / sshhole (CVE-2026-123158)
An OpenSSH login bypass on Alpine and other musl-based systems.
KEV: 9 Nov 2026Identity & human attacks
when the target is a person
5 popular ways attackers bypass MFA
Broken recovery flows, push bombing, help-desk resets, SIM swaps and stolen cookies.
23Deepfakes in video calls
The HK$200M Arup case, and the process checks that actually work.
24Voice cloning: software, voice changers and PVC pipes
AI clones, real-time voice changers, and the tube trick that fools voice biometrics.
25Honeypot social engineering (honey traps)
Romance and sexual lures used for blackmail and access.
26Rubber-hose attacks (wrench attacks)
Coercion beats cryptography, and how crypto holders defend against it.
Updated on 12 Nov 2026