Admin Login

 Expires: — Use code GET10 for 10% off any Linux VPS plan, recurring on every renewal.

HOSTCAY BLOG

Insights on offshore hosting, privacy, security and the cloud.

Microsoft's Record Patch Tuesday: What Infrastructure Teams Need to Know
July 15, 2026 · HOSTCAY

Microsoft's Record Patch Tuesday: What Infrastructure Teams Need to Know

Microsoft released 622 security patches in a single month—triple the previous record. Two zero-days are already being exploited. Here's what matters for your systems.

Read article →
CrashStealer: How Notarized macOS Malware Bypasses Gatekeeper
July 14, 2026 · HOSTCAY

CrashStealer: How Notarized macOS Malware Bypasses Gatekeeper

A new macOS information stealer bypasses Apple's security checks using legitimate notarization. Understand the technical approach and implications for infrastructure defenders.

Read article →
State Infrastructure Under Siege: What the Balochistan Police Breach Teaches Us
July 13, 2026 · HOSTCAY

State Infrastructure Under Siege: What the Balochistan Police Breach Teaches Us

When government portals managing sensitive citizen and criminal data fall to sustained espionage campaigns, the infrastructure lessons extend far beyond one agency. A detailed look at what happened and why.

Read article →
Supply Chain Compromise: The jscrambler npm Incident and Dependency Risk
July 12, 2026 · HOSTCAY

Supply Chain Compromise: The jscrambler npm Incident and Dependency Risk

An npm package update delivered a multi-platform infostealer via preinstall hooks. What this incident reveals about build pipeline risks and detection gaps.

Read article →
When Your Storage Infrastructure Becomes a Security Liability
July 11, 2026 · HOSTCAY

When Your Storage Infrastructure Becomes a Security Liability

A critical vulnerability in distributed storage controllers reveals gaps in how enterprises manage remote infrastructure. What you should audit in your own setup.

Read article →
Ghost Accounts and API Reconnaissance: Securing GitHub Infrastructure
July 10, 2026 · HOSTCAY

Ghost Accounts and API Reconnaissance: Securing GitHub Infrastructure

Attackers are systematically mapping corporate GitHub organisations using dormant accounts and compromised tokens. Here's what infrastructure teams need to know about this reconnaissance pattern.

Read article →

LATEST BLOG ARTICLES

↑
Tor mirror: http://bn4zhfjrulzhxtah4hz6kajllfemuklcycsvkejcwbz3wtbxfhg2y6qd.onion
Client area: http://rek6amsx27ufbn3qohse44vow6clcsym3sy6vruavsnz73pixhghx3ad.onion