Incident Response
What to Do When a Device Hits CISA KEVNew!!
09/14/2026
An incident-style response guide for routers, firewalls, VPNs, NAS devices, and other systems that appear in CISA's KEV catalog.
Restore From a Compromised Backup Without Reinfecting ProductionNew!!
09/12/2026
A clean-room restore workflow for compromised backups: isolate, separate data from executable state, rotate secrets, validate provenance, and reconnect safely.
Is My Router Affected by This CVE? Model, Firmware, and Exposure ChecksNew!!
09/09/2026
Match the exact router model, hardware revision, firmware build, affected feature, and management exposure before acting on a CVE headline. Then route known exploitation or compromise to the appropriate patch, rebuild, rotation, or replacement runbook.
WordPress Core Under Active Exploitation: Verify the Fix and Rule Out Compromise
08/24/2026
Updating WordPress core is only the first step. Use this checklist to verify versions, checksums, users, cron, uploads, logs, WAF data, and rebuild criteria.