Daily DefSec Brief

Jerry Bell

A daily podcast covering the important cyber security news that IT and security teams need to know.

  1. 16h ago ·  Video

    Guessed FortiGate passwords, coding agent hijack, Brotli beyond Node | Cyber Security News Oct 26

    An access broker guessed its way into FortiGate firewalls and decrypted their configs for the domain accounts inside, a planted AGENTS.md file in a Downloads folder told a coding agent to install malware, and the Brotli flaw Node.js patched last week turns out to live in Google's decoder. Plus 33 critical ArubaOS fixes, a third PHP flaw with no patch yet, and a forgotten Popcorn Time updater. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: Where does your team let coding agents start, and who decided? Reply in the comments or at feedback@defensivesecurity.org. 1. Guessed FortiGate logins gave up domain accounts - CVE-2025-64446, CVE-2026-0257, CVE-2019-6693 - Fixed: FortiWeb 7.0.12, 7.2.12, 7.4.10, 7.6.5 or 8.0.2 - Do: Take Fortinet admin logins off the internet - https://fortiguard.fortinet.com/psirt/FG-IR-25-910 2. AGENTS.md in Downloads steered a coding agent - Do: Keep coding agents out of the Downloads folder - https://forever.security/blog/hijacking-ai-agents-via-downloads-folder 3. Update: the Brotli flaw reaches far past Node.js - CVE-2026-111497 - Fixed: Brotli 1.0.10, 1.1.1 or 1.2.1 - Do: Patch every copy of the Brotli decoder - https://research.jfrog.com/post/brotli2shell-beyond-node2shell-and-http2shell/ 4. ArubaOS fixes 33 critical flaws - CVE-2026-79844, CVE-2026-79845, CVE-2026-79846 (+ 2 more) - Fixed: 10.8.1.2, 10.7.2.7, 10.4.1.14, 8.13.3.1 or 8.10.0.24 - Do: Upgrade ArubaOS and restrict management access - https://cyber.gc.ca/en/alerts-advisories/hpe-security-advisory-av26-1079 5. Pillow runs commands through an image's filename - CVE-2026-112900, CVE-2026-112393, CVE-2026-112403 - Fixed: 13.0.0 - Do: Upgrade Pillow in every Python project - https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh 6. Update: a third PHP flaw, with no patch yet - CVE-2026-115560 - Do: Keep PHP's session upload progress turned off - https://www.php.net/archive/2026.php#2026-10-23-1 7. Tailscale SSH lets one device reach root elsewhere - Do: Narrow your Tailscale SSH access rules - https://tailworm.com/ 8. Windows Server 2016 updates end in January - Do: Inventory your Windows Server 2016 machines - https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2016 9. Researchers switched off a Popcorn Time updater - CVE-2026-30612 - Do: Find and remove Time4Popcorn from company machines - https://labs.eye.security/operation-ixim-preventing-a-botnet-of-millions-of-popcorn-time-users/

  2. 3d ago ·  Video

    VeloCloud zero-day exploited, Railway secrets breach, M365 token replay | Cyber Security News Oct 23

    Attackers are exploiting a third VeloCloud Orchestrator zero-day, stolen Microsoft 365 tokens were replayed against 79 organizations from one hosting range, and Railway is telling every customer to rotate their secrets. Plus eMudhra's root leaving Chrome on October 27, and a firewall whose admin password was "password". Every version number in this episode was checked against the vendor's own advisory before it aired. Today's question: How does your team keep audit findings from turning into a pay negotiation? Reply in the comments or at feedback@defensivesecurity.org. 1. Third exploited VeloCloud Orchestrator zero-day - CVE-2026-114625 - Fixed: 5.2.3.18, 6.1.3.10 or 6.4.2.12 - Do: Patch and restrict VeloCloud Orchestrator - https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199 2. Stolen M365 tokens replayed from one hosting range - Do: Search your sign-in logs for that IP range - https://www.huntress.com/blog/token-replay-spray 3. Railway breach: rotate every secret stored there - Do: Rotate every secret you keep in Railway - https://blog.railway.com/p/security-disclosure-wednesday-october-21st 4. Update: Chrome drops eMudhra's root on Oct 27 - CVE-2026-91403 - Do: Replace eMudhra certificates and update Java - https://www.oracle.com/security-alerts/alert-cve-2026-91403.html 5. Update: LiteLLM's stolen tokens came from its logs - Do: Stop logging response bodies on your AI gateway - https://docs.litellm.ai/blog/security-incident-oct-21-2026 6. NoMachine web service open to remote code - CVE-2026-114549 - Fixed: 10.1.7, 9.9.6 or 8.27.1 - Do: Upgrade NoMachine and keep its web port internal - https://www.zerodayinitiative.com/advisories/ZDI-26-786/ 7. Splunk fixes 9.9 flaws in Enterprise and SOAR - CVE-2026-76299, CVE-2026-76302, CVE-2026-76531 (+ 1 more) - Fixed: 9.4.16, 10.0.11, 10.2.8 or 10.4.4; SOAR 8.7.0 - Do: Upgrade Splunk Enterprise and SOAR - https://advisory.splunk.com/advisories/SVD-2026-1008 8. Roundcube fixes 20 flaws in 1.6.20 and 1.7.5 - Fixed: 1.6.20 or 1.7.5 - Do: Upgrade Roundcube - https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5 9. Linux KSMBD flaws public before a kernel fix - Do: Turn off KSMBD wherever it isn't needed - https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html 10. Firewall admin password was "password" - Do: Replace type 7 passwords on your Cisco gear - https://www.theregister.com/security/2026/10/22/it-department-and-auditors-at-major-pharmacy-chain-got-into-a-rip-roaring-fight-about-using-password-on-cisco-firewall/5304592

  3. 4d ago ·  Video

    PHP2Shell exploited, LiteLLM poisoned, Fortinet fixes with no CVEs | Cyber Security News Oct 22

    Attackers are now exploiting PHP2Shell, a poisoned LiteLLM release carried a stealer for AI and cloud keys, and Fortinet shipped critical fixes while holding the CVEs until November 10. Every version number and every fix in this episode was checked against the vendor's own advisory or the researchers' report before it aired. Today's question: How do you check that your security alerts still reach a person? Reply in the comments or at feedback@defensivesecurity.org. 1. Update: PHP2Shell is now being exploited - CVE-2026-109618, CVE-2026-109619 - Do: Patch PHP on every internet-facing server - https://www.php.net/archive/2026.php 2. LiteLLM 1.107.0 shipped a credential stealer - Do: Rebuild affected LiteLLM hosts and rotate their keys - https://research.jfrog.com/post/litellm-hijacked-again/ 3. Fortinet ships critical fixes with no CVEs yet - Do: Patch FortiGates and restrict admin access - https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products 4. GitLab fixes a 10.0 flaw reaching back to 2014 - CVE-2026-110264, CVE-2026-15723, CVE-2026-112212 - Do: Upgrade self-managed GitLab again - https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/ 5. A BlackLotus copy beats Secure Boot on patched PCs - CVE-2022-21894 - Do: Start rolling out Microsoft's Secure Boot revocation - https://securelist.com/uefi-bootkit-blackx/121539/ 6. Node.js fixes RCE and TLS hostname bypasses - CVE-2026-111497, CVE-2026-105483, CVE-2026-106069 (+ 1 more) - Do: Upgrade Node.js and rebuild images that bundle it - https://nodejs.org/en/blog/vulnerability/october-2026-security-releases 7. Clustered Cisco Expressway open to root commands - CVE-2026-76466 - Do: Upgrade clustered Cisco Expressway servers - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vcs-static-cred-hr7EWZ8t 8. BIND fixes four flaws, and 9.18 gets no fix - CVE-2026-94300, CVE-2026-19630, CVE-2026-96888 (+ 1 more) - Do: Patch BIND, and move servers off 9.18 - https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072 9. Chrome now warns when you copy a ClickFix command - Do: Turn on Enhanced Protection in Chrome by policy - https://www.bleepingcomputer.com/news/google/google-chrome-adds-gemini-powered-scam-detection-warns-users-of-clickfix-attacks/ 10. OpenAI agents switched off misalignment alerts - Do: Keep agents' keys away from alerting config - https://www.bleepingcomputer.com/news/security/openai-agents-disabled-safety-monitoring-one-lied-about-it/

  4. 5d ago ·  Video

    PHP critical fixes after a leak, eMudhra CA keys, SafePay ransomware | Cyber Security News Oct 21

    PHP ships fixes today for two critical flaws whose details leaked ahead of disclosure, and a certificate authority's signing keys turned out to be guessable, one of them the number four. Also: a joint advisory on SafePay ransomware, a hijacked account that swapped OVHcloud's CLI downloads for a stealer, and a test account with the password Password1. Fixes were checked against the vendor's advisory or release notes where one exists, and against the researchers' report where not. Today's question: How does your team find accounts that should have been deleted? Reply in the comments or at feedback@defensivesecurity.org. 1. PHP fixes two leaked critical flaws today - CVE-2026-109618, CVE-2026-109619 - Do: Find every copy of PHP you run - https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities 2. eMudhra CA keys were trivially guessable - CVE-2026-111943 - Do: Update the CA bundles outside your browsers - https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ 3. SafePay: 600 victims via passwords, old flaws - CVE-2020-3259, CVE-2023-20269, CVE-2023-27532 (+ 2 more) - Do: Require MFA on every VPN login - https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a 4. OVHcloud CLI releases carried a secret stealer - Fixed: 0.16.0 - Do: Turn on release immutability for your GitHub repositories - https://www.bleepingcomputer.com/news/security/ovhcloud-cli-releases-backdoored-on-github-to-steal-developer-secrets/ 5. Zeabur shuts down after second breach - Do: Rotate every secret you stored on Zeabur - https://www.bleepingcomputer.com/news/security/zeabur-shutting-down-after-second-security-breach-in-two-months/ 6. OpenCode silently patched a code-execution flaw - Fixed: 1.18.33 - Do: Upgrade OpenCode on Windows developer machines - https://github.com/anomalyco/opencode/releases/tag/v1.18.33 7. Chrome 156 fixes 353 security flaws - CVE-2026-113341, CVE-2026-113279, CVE-2026-113072 (+ 3 more) - Fixed: 156.0.8078.47/.48 - Do: Push the Chrome update and force the restart - http://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html 8. Oracle's quarterly update fixes 1,209 flaws - Do: Patch Oracle Fusion Middleware and E-Business Suite first - https://www.oracle.com/security-alerts/cpuoct2026.html 9. A 2012 Password1 test account let ransomware in - Do: Disable accounts that haven't signed in for a year - https://www.theregister.com/cyber-crime/2026/10/20/password1-and-a-forgotten-test-account-land-welsh-outfits-in-hot-water/5304139

  5. 6d ago ·  Video

    NetScaler root takeover, Siemens app in ClickFix, Plex hijacks | Cyber Security News Oct 20

    The NetScaler flaw that crashed appliances is a step in a root takeover whose implant tries to copy itself to the HA partner. ClickFix crews bring a signed Siemens program to run their malware, Plex servers are being hijacked a day after an exploit went public, and a fake WatchGuard download site collects VPN logins. Every version number and every fix in this episode was checked against the vendor's advisory, release notes or the CVE record before it aired. Today's question: Where does your team tell people to get the VPN client? Reply in the comments or at feedback@defensivesecurity.org. 1. Update: NetScaler crash bug drives root takeover - CVE-2026-88771, CVE-2026-88779 - Do: Check both NetScaler HA nodes, rotate keys - https://www.rapid7.com/blog/post/ra-netscaler-intrusions-chaining-cve-2026-88771-and-cve-2026-88779 2. ClickFix runs malware through signed Siemens app - CVE-2026-110936 - Fixed: V4.0.9.8 - Do: Alert on Siemens Software Center in AppData - https://www.securityweek.com/siemens-software-center-vulnerability-exploited-in-clickfix-malware-attacks/ 3. Redis RESTORE flaw reported exploited - CVE-2026-25243 - Fixed: 8.6.5, 7.2.15 or 6.2.23 - Do: Block the RESTORE command in Redis ACLs - https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-423 4. Plex2Shell exploited a day after the write-up - CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 (+ 1 more) - Fixed: 1.43.3.10861 - Do: Update Plex Media Server - https://www.cve.org/CVERecord?id=CVE-2026-96652 5. Rank Math PRO downloads shipped a backdoor - CVE-2026-111862 - Fixed: 3.0.124 - Do: Restore affected Rank Math sites from backup - https://thehackernews.com/2026/10/popular-wordpress-seo-plugin-rank-math.html 6. OpenCode Console exposed stored AI provider keys - Do: Rotate any AI keys stored in OpenCode Console - https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/ 7. Update: GhostAction moves to phishing maintainers - Do: Turn off automatic tasks in VS Code - https://thehackernews.com/2026/10/ghostaction-attackers-plant-credential.html 8. Archibus login bypass leads to code execution - CVE-2026-107186, CVE-2026-107187, CVE-2026-107188 - Fixed: 2025.02 - Do: Upgrade Eptura Archibus - https://www.rapid7.com/blog/post/ve-authentication-bypass-remote-code-execution-and-database-read-in-eptura-archibus-fixed 9. Fake WatchGuard site steals VPN logins - Do: Give staff a bookmarked VPN client download link - https://www.huntress.com/blog/fake-watchguard-vpn-credential-phishing

  6. Oct 19 ·  Video

    ConnectWise app breach hits M365 tenants, FortiGate memory implant | Cyber Security News Oct 19

    Attackers used ConnectWise's app credentials to enter Microsoft 365 tenants. Also: a FortiGate implant, stolen UpdraftCentral keys, NTLMv1 blocks, AOMEI's update servers, and fixes. Every version number and every fix in this episode was checked against the vendor's advisory or the CVE record before it aired. Today's question: How do you review vendor apps in your tenant? Reply in the comments or at feedback@defensivesecurity.org. 1. ConnectWise app credentials used on M365 tenants - Do: Disable ConnectWise app identities and audit their roles - https://www.huntress.com/blog/vendor-credential-enables-unauthorized-access 2. FortiManager break-in leads to memory-only implant - CVE-2025-61624 - Fixed: FortiOS 7.6.5 or 7.4.10 - federal due 2026-10-19 - Do: Patch FortiOS and rotate FortiManager-held credentials - https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/ 3. Stolen UpdraftCentral keys backdoor WordPress - Do: Delete UpdraftCentral keys from your WordPress sites - https://patchstack.com/articles/updraftcentral-key-compromise-wordpress-backdoors/ 4. AOMEI update servers tampered with for minutes - Do: Hunt AOMEI machines for the RadminComponentRuntime task - https://cloud.google.com/blog/topics/threat-intelligence/investigating-ephemeral-supply-chain-tampering/ 5. Update: KVM escape PwnEscape gets a kernel fix - CVE-2026-99999 - Do: Patch the kernel on KVM hosts - https://access.redhat.com/security/cve/cve-2026-99999 6. Max-severity Magento flaw bypasses September's fix - CVE-2026-103849 - Do: Apply Adobe's October Magento patch now - https://www.adobe.com/trust/security/products/commerce/apsb26-153.html 7. MOVEit Transfer fixes 12 high-severity flaws - CVE-2026-89067 - Fixed: 2025.1.6 or 2026.0.4 - Do: Upgrade MOVEit Transfer - https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-1058 8. Firefox 158 fixes 77 flaws, 30 high - Fixed: Firefox 158, ESR 153.5 or 115.43 - Do: Push the Firefox and Thunderbird updates - https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/ 9. Airflow SSH accepts any server key by default - CVE-2026-94134, CVE-2026-94135 - Fixed: 7.0.0 - Do: Upgrade Airflow's SSH and SFTP providers - https://www.ox.security/blog/by-default-insecure-apache-airflow-disables-ssh-host-key-verification/ 10. Official OpenAI skill used an unowned domain - Do: Search your code for render-internal.com - https://www.air.security/blog-posts/render-openai 11. Windows now blocks NTLMv1 sign-on by default - Do: Find NTLMv1 dependencies before setting Audit mode back - https://support.microsoft.com/help/5066470

  7. Oct 16 ·  Video

    BeyondTrust zero-day exploited, Atlassian flaw under attack | Cyber Security News Oct 16

    Attackers are using a BeyondTrust Remote Support zero-day and the Atlassian Data Center file-read flaw. Also: Office Preview Pane flaws, AI coding tokens stolen, Drupal, Next.js and NGINX fixes, hijacked NAS boxes, spyware in ads, and AI agents on leaked credentials. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: Where do your developers' AI tool tokens live, and how long do they last? Reply in the comments or at feedback@defensivesecurity.org. 1. BeyondTrust Remote Support zero-day exploited - CVE-2026-102764 - Do: Patch BeyondTrust Remote Support and review it for compromise - https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust/ 2. Update: Atlassian file-read flaw now exploited - CVE-2026-21589 - Fixed: see Atlassian's table (Confluence 9.2.26 / 10.2.19, Jira 9.12.40 / 10.3.26 / 11.3.12, Bitbucket 9.4.26 / 10.2.8 / 10.5.1) - federal due 2026-10-18 - Do: Patch Atlassian Data Center or take it offline - https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html 3. Critical Office flaws hit via the Preview Pane - CVE-2026-108448, CVE-2026-108439, CVE-2026-108440 - Fixed: LTSC 2024 16.0.17932.21056, LTSC 2021 16.0.14334.20974, Mac 16.114.26101123 - Do: Make sure Tuesday's Office update actually installed - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108448 4. Aoki stealer takes AI coding assistant tokens - Do: Keep long-lived tokens off developer laptops - https://www.infosecurity-magazine.com/news/aoki-infostealer-ai-coding/ 5. Drupal critical flaw; 28% on end-of-life branches - CVE-2026-108097 - Fixed: 11.4.10, 11.3.19 or 10.6.19 - Do: Update Drupal core, or uninstall Field UI - https://www.drupal.org/sa-core-2026-014 6. Hacked edge devices resold as residential proxies - CVE-2024-3272, CVE-2024-3273, CVE-2021-44228 (+ 1 more) - Do: Take NAS boxes and recorders off the internet - https://www.greynoise.io/blog/proxyjacking-edge-devices-residential-proxies 7. Next.js out-of-band fix for two critical RCEs - CVE-2026-96889 - Fixed: 16.4.1 or 15.5.28 - Do: Upgrade Next.js - https://github.com/vercel/next.js/security/advisories/GHSA-2464-fhr4-w9xw 8. Online ads delivered zero-click spyware - Do: Block ads on managed phones and browsers - https://therecord.media/spyware-citizen-lab-advertising 9. NGINX fixes five flaws, one from 2005 - CVE-2026-15176, CVE-2026-93479, CVE-2026-95101 (+ 2 more) - Fixed: 1.30.6 or 1.31.7 - Do: Upgrade NGINX - https://nginx.org/en/security_advisories.html 10. Test AI agents got in on leaked credentials - Do: Find and rotate credentials sitting in your code - https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html

  8. Oct 15 ·  Video

    Cisco email gateway exploited, PAN-OS zero-day, Zimbra send-as flaw | Cyber Security News Oct 15

    Attackers are getting root on Cisco Secure Email Gateways with a crafted attachment, and the fix is a month old. Also: a PAN-OS zero-day, Ahsay's failed patch, Nextcloud, Zimbra, curl, Claude Code Desktop, and which package managers check their downloads. Every version number and every fix in this episode was checked against the vendor, the CVE record or the researcher who found it before it aired. Today's question: Have you ever turned on a package manager's integrity checks on purpose, and what made you do it? Reply in the comments or at feedback@defensivesecurity.org. 1. Cisco email gateway exploited through attachments - CVE-2026-76519 - Fixed: Content Scanner Tools 25.3.0.5525; AsyncOS 15.5.5-014 or 16.5.0-780 - federal due 2026-10-17 - Do: Update the Cisco email gateway's content scanner - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp 2. PAN-OS management interface zero-day exploited - CVE-2026-0322 - Fixed: 12.2.4, 12.1.4-h12, 12.1.7-h8, 12.1.10-h2, 11.2.16, 11.1.16-h3, 10.2.18-h12 - federal due 2026-10-17 - Do: Patch PAN-OS and lock down management access - https://security.paloaltonetworks.com/CVE-2026-0322 3. Update: AhsayCBS hotfix out, first patch failed - CVE-2026-105134, CVE-2026-105133 - Fixed: 10.3.4.45 (v10); 9.15.2.70 (v7 to v9) - federal due 2026-10-17 - Do: Apply the AhsayCBS hotfix and reboot - https://www.huntress.com/blog/ahsaycbs-flaws-exploit 4. Nextcloud's built-in Collabora app exploited - CVE-2026-110447 - Fixed: 26.4.303 - Do: Update or remove Nextcloud's built-in Collabora app - https://cveawg.mitre.org/api/cve/CVE-2026-110447 5. Linux vhost flaw: local root, and a VM escape - CVE-2026-74580 - Fixed: 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9 - Do: Update and reboot your Linux hosts - https://cloud.tencent.com/announce/detail/2483 6. Zimbra: any user can send mail as the CEO - CVE-2026-73571, CVE-2026-10631, CVE-2026-50055 (+ 2 more) - Fixed: 10.1.17 (CVE-2026-73571); 10.1.20 (CVE-2026-10631, CVE-2026-50055) - Do: Upgrade Zimbra - https://www.rapid7.com/blog/post/ve-breaking-zimbra-identity-boundaries-part-1 7. curl fixes its first High flaw since 2023 - CVE-2026-92392 - Fixed: 8.23.0 - Do: Update curl - https://curl.se/docs/CVE-2026-92392.html 8. Claude Code Desktop's preview pane read SSH keys - Fixed: 1.30096.1 - Do: Get long-lived secrets off developer laptops - https://noma.security/noma-labs/sneakpeek-how-the-preview-pane-in-claude-code-desktop-can-exfiltrate-your-data 9. AI built a Chrome exploit in six days - CVE-2026-85045 - Fixed: 152.0.7977.82 - Do: Force Chrome relaunches after updates - https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit 10. Of 25 package managers, two check every download - Do: Commit lockfiles and install from them in CI - https://blog.trailofbits.com/2026/10/14/package-managers-have-an-integrity-problem/

See All (80)

Ratings & Reviews

5
out of 5
2 Ratings

About

A daily podcast covering the important cyber security news that IT and security teams need to know.

Information

  • Creator
    Jerry Bell
  • Years Active
    2026
  • Episodes
    80
  • Rating
    Clean
  • Copyright
    © 2026 Jerry Bell
  • Show Website
    Daily DefSec Brief

You Might Also Like