https://cybersecpro.me/categories/security-operations/Recent content in Security Operations on Juan Carlos MuneraHugo -- gohugo.ioen© 2026 Juan Carlos MuneraWed, 05 Aug 2026 00:00:00 +0000https://cybersecpro.me/posts/public-exploit-window-patch-priority/Wed, 05 Aug 2026 00:00:00 +0000https://cybersecpro.me/posts/public-exploit-window-patch-priority/A threat-hunting report puts the gap between a public proof-of-concept and active exploitation at about 48 hours. Here is what that does to patch scheduling, why severity scores are the wrong primary signal, and a few adjustments worth making.https://cybersecpro.me/posts/covert-data-exfil/Fri, 12 Jun 2026 00:00:00 +0000https://cybersecpro.me/posts/covert-data-exfil/A practitioner primer on protocol abuse: how data quietly leaves networks through DNS, ICMP, HTTPS/TLS, and the headers of TCP itself.https://cybersecpro.me/posts/ir-firm-insider-threat-trust-architecture/Fri, 01 May 2026 00:00:00 +0000https://cybersecpro.me/posts/ir-firm-insider-threat-trust-architecture/The BlackCat sentencings expose the trust every organization quietly extends to its incident response vendor, and how to structure it better.https://cybersecpro.me/posts/device-code-phishing-mfa-bypass/Mon, 06 Apr 2026 00:00:00 +0000https://cybersecpro.me/posts/device-code-phishing-mfa-bypass/At least 11 phishing kits now abuse the OAuth device flow to bypass MFA entirely. How the attack works and how to shut it down.https://cybersecpro.me/posts/device-security-fcc/Wed, 25 Mar 2026 00:00:00 +0000https://cybersecpro.me/posts/device-security-fcc/Every consumer router made outside the US is now on the FCC Covered List. Why firmware verification matters more than the import ban.https://cybersecpro.me/posts/nhi-emerging-threat/Tue, 17 Mar 2026 00:00:00 +0000https://cybersecpro.me/posts/nhi-emerging-threat/If your IAM program doesn’t treat non-human identities with the same rigor as human accounts, you have a problem that’s already being exploited.https://cybersecpro.me/projects/intel-hub/Sun, 15 Mar 2026 00:00:00 +0000https://cybersecpro.me/projects/intel-hub/Monitors 170+ cybersecurity, geopolitical, OSINT, and dark web feeds with severity classification, credibility scoring, and bias tagging. No API keys.https://cybersecpro.me/posts/quantum-wont-kill-encryption/Thu, 19 Feb 2026 00:00:00 +0000https://cybersecpro.me/posts/quantum-wont-kill-encryption/Why the cryptographic doomsday framing misleads, and what practitioners should actually be doing about post-quantum migration in 2026.https://cybersecpro.me/posts/zero-trust-security/Thu, 22 Jan 2026 00:00:00 +0000https://cybersecpro.me/posts/zero-trust-security/Zero Trust assumes no implicit trust based on network location. What that means in practice and how to build toward it incrementally.