Non-IP Remote Access, Malware stays out- your data stays in.
Joined January 2026
- Tweets 73
- Following 93
- Followers 9
- Likes 125
13 Photos and videos
May 19
BeyondTrust PAM: public PoC to active ransomware in 24 hours. CVSS 9.9, pre-auth RCE. The pattern is not BeyondTrust. It is software-defined remote access itself.
zeroport.com/blog/beyondtrus…
25
Zeroport retweeted
May 18
מחפשים שם חדש לקמפיין, קבוצת תקיפה או רושעה? קבלו את מג'נרט שמות הסייבר!
cyberpros.co/
2
3
184
May 17
I'm excited to be speaking at Infosecurity Europe 2026, 2-4 June! Come see me and hundreds of other talks digging into the latest insights, with our shared goal of Building a Safer Cyber World. 🤝 #Infosec2026 #CyberSafe
Here's the link to register: invt.io/1txbjbjk1pb
1
19
May 13
CISA CI Fortify asks OT operators to prove they have isolation capability. Most remote access can't satisfy it by design.
Why: zeroport.com/blog/cisa-ci-fo…
4
May 11
1/ CVE-2026-0300: pre-auth root RCE in PAN-OS. No patch until May 13. CISA added it to KEV on May 6. Here is why this keeps happening. 🧵
1
74
May 11
5/ The question is not when the next one appears. It will appear. The question is what architecture you build around that fact. Hardware that transmits only pixels has no software attack surface at the boundary. No CVE applies to a pixel channel.
1
24
May 11
CVE-2026-0300: pre-auth root RCE in PAN-OS.
No patch until May 13.
BeyondTrust (Feb),
Citrix (Mar),
SonicWall (Apr),
Palo Alto (May).
This is the pattern.
New post:
zeroport.com/blog/pan-os-cve…
105
May 7
Fortinet SSL-VPN stops getting patches on May 11. Four days left.
Most migration conversations are asking the wrong question.
1
22
May 7
5/6 Path 3: Hardware-enforced access. No IP path into the network. No session token. Stolen credentials get an attacker pixels and a cursor. Not code execution. Not lateral movement. The attack class is gone, not relocated.
1
11
May 7
6/6 Full breakdown of all three paths and the one question worth asking before you pick one: zeroport.com/blog/fortinet-s…
1
May 7
Fortinet SSL-VPN stops getting patches on May 11. Before you migrate, ask one question: does the new product eliminate the attack class, or just move it? zeroport.com/blog/fortinet-s…
15
May 6
"Air-gapped remote access" is a term most vendors use incorrectly. An air gap means no network connection. Most products labeled "air-gapped" still create one — they just control it with software. New post on what air-gapped remote access actually requires lnkd.in/d-xS_kuV
1
1
91
May 6
VPN Credential Theft: Why Stolen Logins Have Become the Preferred Entry Point Into Enterprise Networks
zeroport.com/blog/vpn-creden…
37