July 20, 2026 · 8 min read
SonicWall SMA1000 zero-day: Patch, then prove the appliance is clean
How SMA1000 owners should patch CVE-2026-15409 and CVE-2026-15410, then verify the appliance was not used for internal access.
Read articleAll insights
Tech Lead in Boston
Daniel Foster
Daniel Foster is Tech Lead at CulperSec in Boston. He contributes technical context to CulperSec articles about security, vulnerabilities, and technology operations.
Articles by Daniel Foster
Research, guidance, and technical perspectives published on the CulperSec blog.
July 14, 2026 · 8 min read
CMMC Phase II suspension: what SMB defense contractors should keep doing
The CMMC Phase II suspension pauses some third-party pressure, not CUI duties. Here is what SMB defense contractors should review and document.
Read article
March 17, 2026 · 9 min read
What the recent Stryker incident teaches healthcare and medtech teams about cyber resilience
A practical lessons-learned look at the recent Stryker cyber incident, with concrete steps healthcare and medtech security teams can take to improve containment, continuity, and recovery.
Read article
August 6, 2025 · 5 min read
SonicWall Gen 7 SSLVPN Threat Advisory
What you should know about the ongoing SonicWall SSLVPN attacks
Read article
July 4, 2025 · 5 min read
CVE-2025-20309: Cisco SSH Credentials Vulnerability
Read the latest news on CVE-2025-20309
Read article
June 14, 2024 · 5 min read
Penetration Test Vs Vulnerability Scan
Learn the difference between a penetration test and a vulnerability scan
Read article
July 12, 2023 · 6 min read
CVE-2023-36884: Patch Status and Storm-0978 Attack Guidance
Microsoft patched CVE-2023-36884 in August 2023. Review the Storm-0978 attack chain, current remediation, hunting steps, and response guidance.
Read article
January 25, 2023 · 5 min read
IT Security And Operational Due Diligence
Read our guidance on IT Security And Operational Due Diligence
Read article
December 10, 2022 · 7 min read
General IT Security Best Practices For Your Business
Read our guidance on General IT Security Best Practices For Your Business
Read article
May 31, 2022 · 5 min read
Follina (CVE-2022-30190): Current Status and Remediation
Microsoft patched Follina in June 2022 and added defense-in-depth updates in July. Review the attack path, current remediation, and validation steps.
Read article
July 7, 2021 · 3 min read
Kaseya Ransomware Attack: Everything You Need To Know (ZDNet)
Read news about the Kaseya Ransomware Attack
Read article
June 16, 2021 · 2 min read
Ransomware Poll: 80% Of Victims Don’t Pay Up
Read the breakdown of the ransomware poll
Read article
June 16, 2021 · 2 min read
Ransomware Attackers Partnering With Cybercrime Groups To Hack High-Profile Targets
Read about how cybercrime groups are partnering with ransomware attackers to hack high-profile targets
Read article