
September 7, 2026 · 9 min read
Virtualizor's trusted update became malware
A BGP hijack redirected Virtualizor update traffic and delivered malware to hypervisors. Operators need evidence, credential rotation, and clean rebuilds.
Read article
Tech Lead in Boston
Daniel Foster is Tech Lead at CulperSec in Boston. He contributes technical context to CulperSec articles about security, vulnerabilities, and technology operations.
Research, guidance, and technical perspectives published on the CulperSec blog.

September 7, 2026 · 9 min read
A BGP hijack redirected Virtualizor update traffic and delivered malware to hypervisors. Operators need evidence, credential rotation, and clean rebuilds.
Read article
September 2, 2026 · 8 min read
PaperCut Release 3 closes an exploited RCE chain, but exposed servers still need evidence preservation, hunting, and rebuild decisions.
Read article
September 2, 2026 · 9 min read
CVE-2026-73570 is under active exploitation. Zimbra teams need to identify the vulnerable configuration, upgrade, and investigate for compromise.
Read article
July 20, 2026 · 8 min read
How SMA1000 owners should patch CVE-2026-15409 and CVE-2026-15410, then verify the appliance was not used for internal access.
Read article
July 14, 2026 · 11 min read
The CMMC Phase II suspension pauses some third-party pressure, not CUI duties. Here is what SMB defense contractors should review and document.
Read article
March 17, 2026 · 9 min read
A practical lessons-learned look at the recent Stryker cyber incident, with concrete steps healthcare and medtech security teams can take to improve containment, continuity, and recovery.
Read article
August 6, 2025 · 5 min read
What you should know about the ongoing SonicWall SSLVPN attacks
Read article
July 4, 2025 · 5 min read
Read the latest news on CVE-2025-20309
Read article
June 14, 2024 · 5 min read
Learn the difference between a penetration test and a vulnerability scan
Read article
January 25, 2023 · 5 min read
Read our guidance on IT Security And Operational Due Diligence
Read article
December 10, 2022 · 7 min read
Read our guidance on General IT Security Best Practices For Your Business
Read article