<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Scan Shield Security Horizon]]></title><description><![CDATA[Empowering your digital world with expert IT solutions, reliable computer repair, and cutting-edge cybersecurity services - where duty, honor, and professionalism meet.]]></description><link>https://nickmeade1990.wixsite.com/sssh/blog</link><generator>RSS for Node</generator><lastBuildDate>Mon, 02 Nov 2026 12:42:35 GMT</lastBuildDate><atom:link href="https://nickmeade1990.wixsite.com/sssh/blog-feed.xml" rel="self" type="application/rss+xml"/><item><title><![CDATA[From Unauthenticated Access to Root: Analyzing Cisco SD-WAN VulnerabilitiesCVE-2026-20182 and CVE-2026-20245]]></title><description><![CDATA[1.      OVERVIEW: Cisco Catalyst SD-WAN Controllers are affected by two vulnerabilities that can be chained together to achieve full system compromise. The first vulnerability, CVE-2026-20182, exists within the controller's peering authentication mechanism. By sending crafted requests to an affected system, an unauthenticated remote attacker can authenticate as an internal, high-privileged, non-root user account. This access provides the attacker with NETCONF capabilities, allowing them to...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/from-unauthenticated-access-to-root-analyzing-cisco-sd-wan-vulnerabilitiescve-2026-20182-and-cve-20</link><guid isPermaLink="false">6a289be7bcf454bfefdf28b1</guid><pubDate>Tue, 09 Jun 2026 23:10:11 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_766b0e350dd84400b1d75676aafbaed6~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Why CVE-2026-50751 Matters: Assessing a Qilin-Linked VPN Zero-Day]]></title><description><![CDATA[1.      Incident Overview Check Point disclosed CVE-2026-50751, a critical zero-day authentication bypass vulnerability affecting multiple VPN products, including Mobile Access VPN, SSL VPN, Remote Access VPN, and Spark gateways. The vulnerability allows remote attackers to establish unauthorized VPN connections without valid credentials, providing a potential entry point into internal networks. According to Check Point, exploitation activity has been linked to tooling associated with the...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/why-cve-2026-50751-matters-assessing-a-qilin-linked-vpn-zero-day</link><guid isPermaLink="false">6a273d6f4f1a881169520ab8</guid><pubDate>Mon, 08 Jun 2026 22:10:25 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_3045f325e99445b9b70b1c1971bf7490~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[SolarWinds Serv-U Vulnerability Added to CISA KEV After Active Exploitation Observed]]></title><description><![CDATA[Security teams are being urged to patch vulnerable SolarWinds Serv-U installations after CISA added CVE-2026-28318 to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability affects SolarWinds Serv-U Managed File Transfer and Secure FTP products and has already been observed being exploited in the wild to disrupt services and cause outages. Unlike many vulnerabilities that remain theoretical, this one has crossed an important threshold: attackers are actively using it. While the...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/solarwinds-serv-u-vulnerability-added-to-cisa-kev-after-active-exploitation-observed</link><guid isPermaLink="false">6a24aa181f44c606b37a4454</guid><pubDate>Sat, 06 Jun 2026 23:21:19 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_c1196149407d4df48a0ed90f3f384e03~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Atlas RAT Campaign Targets European Organizations: A Cyber Shield Lens Assessment]]></title><description><![CDATA[Recent threat intelligence reporting has revealed a targeted cyber espionage campaign leveraging a previously undocumented Remote Access Trojan (RAT) known as Atlas RAT. The malware has been linked to suspected state-sponsored threat actors targeting organizations throughout Europe. Unlike traditional financially motivated malware, Atlas RAT appears designed to provide long-term covert access to victim environments, enabling intelligence gathering and persistent surveillance. According to the...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/atlas-rat-campaign-targets-european-organizations-a-cyber-shield-lens-assessment</link><guid isPermaLink="false">6a20e65c1fcfaffaf6e0d619</guid><pubDate>Thu, 04 Jun 2026 02:46:55 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_a5d7847f1e854f0da3d77806db9986b2~mv2.png/v1/fit/w_1000,h_887,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[The Cybersecurity Threat Landscape (APT 28) ]]></title><description><![CDATA[By:  Taylor Jackson, Nicholas Meade, Kenvodrick Jay, Odalys Huerta, Brice Hagood    ​ Introduction   	Advanced Persistent Threats (APTs) represent one of the most formidable challenges in modern cybersecurity, combining stealth, persistence, and strategic intent that far exceed the capabilities of typical cybercriminal activity. Unlike opportunistic attacks that seek immediate financial gain, APTs are often orchestrated by well-resourced, state-sponsored groups whose operations span months or...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/the-cybersecurity-threat-landscape-apt-28</link><guid isPermaLink="false">6975469916ee2e05645dd2b4</guid><pubDate>Sat, 24 Jan 2026 22:24:29 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_c8961ef331144e53969c6dd28f90994a~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Resume]]></title><link>https://nickmeade1990.wixsite.com/sssh/post/resume-1</link><guid isPermaLink="false">695039c54e106942d11c1bbd</guid><pubDate>Sat, 27 Dec 2025 19:57:32 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_8c43f240a34c4b61aa719f92cdc6c2ed~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[CVE-2007-2447: Samba “username map script” Command Injection]]></title><description><![CDATA[CVE-2007-2447 is a critical remote command execution vulnerability affecting legacy versions of Samba . The issue stems from improper input sanitization when the username map script feature is enabled, allowing attackers to inject and execute arbitrary commands with elevated privileges. Although this vulnerability is over a decade old, it remains highly relevant in cybersecurity education due to how clearly it demonstrates the risks of insecure configuration combined with unsanitized input...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/cve-2007-2447-samba-username-map-script-command-injection</link><guid isPermaLink="false">6942c38aab52a76cf165ad5c</guid><pubDate>Wed, 17 Dec 2025 14:58:38 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_20e007253daf41609a34041594661dc1~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Exploiting vsftpd 2.3.4 (CVE-2011-2523): A Controlled Lab Walkthrough]]></title><description><![CDATA[Overview This lab demonstrates the exploitation of CVE-2011-2523 , a backdoor vulnerability affecting vsftpd version 2.3.4 . The objective was to move from service enumeration to confirmed system compromise in a controlled environment, while validating impact through manual testing rather than relying solely on automated scanners. Step 1: Service Enumeration The first step was identifying exposed services on the target system using focused service discovery. nmap -sV -p 21 <victim IP> Result...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/exploiting-vsftpd-2-3-4-cve-2011-2523-a-controlled-lab-walkthrough</link><guid isPermaLink="false">6941fdcf7aecebf9ca3e5137</guid><pubDate>Wed, 17 Dec 2025 00:50:58 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_8bcad1c990ce4e50a672fdb8aed1c895~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Too Secure for Their Own Good]]></title><description><![CDATA[The Uncanny Adventures at Geek Squad: Too Secure for Their Own Good Edition Yesterday, I talked about the “A” in the CIA triad—Availability. Today’s story ties directly into that. For many older clients, the biggest issue isn’t malware, hackers, or data breaches. It’s simply getting locked out of their accounts. They don’t use password managers, they don’t understand passkeys—they just want their accounts accessible with a password they can remember and a reset option that doesn’t feel like a...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/too-secure-for-their-own-good</link><guid isPermaLink="false">6932ec46fb42412147964db2</guid><pubDate>Fri, 05 Dec 2025 14:30:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_7978ceb746ac4aeb96327fcde0314289~mv2.jpg/v1/fit/w_800,h_533,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Scannow Edition]]></title><description><![CDATA[The uncanny adventures at Geek Squad: The Scannow Edition Over the past week, I’ve had several clients come in frustrated because Windows or their games kept crashing. Systems were unstable, unavailable, and unusable — meaning one pillar of the CIA Triad was compromised: Availability. And yes — that alone can make this a cybersecurity incident. Too many people picture cybersecurity as hackers in basements, malware, or Hollywood-level digital warfare. But the CIA Triad isn’t built on movie...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/scannow-edition</link><guid isPermaLink="false">6932eb71fb42412147964b47</guid><pubDate>Fri, 05 Dec 2025 14:28:38 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_f9bb43a077f1423d8ae1d3da59c340f3~mv2.jpg/v1/fit/w_800,h_533,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Pretexting in the Wild]]></title><description><![CDATA[The Uncanny Adventures at Geek Squad — A gentleman came in today, worried and shaken. He said his bank had called him — two unauthorized checks had been deposited into his account. Instinctively I asked the first question every security-minded person should: “Did you change your password?” “Yes,” he said. “The banker helped me reset it over the phone.” Good… right? My team lead and I inspected his phone — apps, settings, update history, anything suspicious. Nothing. No malware. No strange...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/pretexting-in-the-wild</link><guid isPermaLink="false">6932eaf86b2b69cfe5c3d8a3</guid><pubDate>Fri, 05 Dec 2025 14:24:50 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_142eebcef376471a95cd59bafcefb76d~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[The New Threat Actor pt. 2]]></title><description><![CDATA[As many of you know, I’ve been working with Pearl Technologies on researching behaviors of Threat actors in newer and modern technology,...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/the-new-threat-actor-pt-2</link><guid isPermaLink="false">68d6ea64ef091a1617dc21a1</guid><pubDate>Fri, 26 Sep 2025 19:33:29 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_9bcac3fe8b734982b7e85efe49f382d5~mv2.png/v1/fit/w_981,h_565,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Cap HTB – From IDOR to Root via Linux Capabilities]]></title><description><![CDATA[Cap HTB – From IDOR to Root via Linux Capabilities Introduction The HackTheBox machine Cap  is a great example of how seemingly small...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/cap-htb-from-idor-to-root-via-linux-capabilities</link><guid isPermaLink="false">68b4b67bfc7bbf175897f933</guid><pubDate>Sun, 31 Aug 2025 20:55:26 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_bb07851e3e8142c8b484f330200b9418~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[CVE-2020-1934: XXE to RCE in HTB “Markup” Box Walkthrough]]></title><description><![CDATA[CVE-2020-1934: XXE to RCE in HTB “Markup” Box Walkthrough Box Name:  Markup Vuln Spotlight:  XXE exploitation leading to privilege...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/cve-2020-1934-xxe-to-rce-in-htb-markup-box-walkthrough</link><guid isPermaLink="false">68aa73e1855527eea2cb9e2f</guid><pubDate>Sun, 24 Aug 2025 02:07:53 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_b78bb060d0794404a22f4b169c68712f~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Exploiting LFI and LXD for Root: A Walkthrough of CVE-2018-12613]]></title><description><![CDATA[Published on:  August 23, 2025 By:  Nickmeade1990 Introduction File Inclusion vulnerabilities are among the most dangerous flaws in...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/exploiting-lfi-and-lxd-for-root-a-walkthrough-of-cve-2018-12613</link><guid isPermaLink="false">68a9f4761ef02eaf6d150bee</guid><pubDate>Sat, 23 Aug 2025 17:08:57 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_8260ecd7591941819e53235b762b07ee~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[RESUME]]></title><link>https://nickmeade1990.wixsite.com/sssh/post/resume</link><guid isPermaLink="false">68a9746d689a6f23610bca1a</guid><pubDate>Sat, 23 Aug 2025 08:02:48 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_c0b81d0996264c5ebecde59e1b2801c2~mv2.png/v1/fit/w_1000,h_768,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[From Payload to Pwned: Recreating Log4Shell (CVE-2021-44228) in a Controlled Lab]]></title><description><![CDATA[In late 2021, the cybersecurity world was shaken by one of the most severe zero-days ever discovered: CVE-2021-44228 , better known as...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/from-payload-to-pwned-recreating-log4shell-cve-2021-44228-in-a-controlled-lab</link><guid isPermaLink="false">68a90457689a6f23610ab07b</guid><pubDate>Sat, 23 Aug 2025 00:03:42 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_c391878b3ff047fa967256220206042d~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[Demo Scan for Spouse: CVE-2022-26809 Write-Up]]></title><description><![CDATA[ Introduction Recently, I decided to put together a quick live demonstration for my spouse to explain how vulnerability scanning and...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/demo-scan-for-spouse-cve-2022-26809-write-up</link><guid isPermaLink="false">68a7a10d8f974b7b3e126550</guid><pubDate>Thu, 21 Aug 2025 22:47:36 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_e28bde9b862f4e8782327aabd04eecf8~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[The New Threat Actor]]></title><description><![CDATA[Threat actors. We all know them. Hacktivist – Malicious intent to proof a political point. Organized crime – criminal organization...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/the-new-threat-actor</link><guid isPermaLink="false">68a5413f6aa481be4935691d</guid><pubDate>Wed, 20 Aug 2025 03:31:27 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_8a5a40399ece4ff08b7a6555aed7bc7e~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item><item><title><![CDATA[The Passwordless Password]]></title><description><![CDATA[Passwords have been in our lives for decades. Even before technology, a spoken password might have been given to receive access to a...]]></description><link>https://nickmeade1990.wixsite.com/sssh/post/the-passwordless-password</link><guid isPermaLink="false">68a5062481e6ee2fae5f6964</guid><pubDate>Tue, 19 Aug 2025 23:23:01 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/4d79c3_b0bf93a03add402191897b1ffc51e644~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Nick Meade</dc:creator></item></channel></rss>