<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Alexandre Darcherif — Notes on security</title><link>https://www.darcherif.fr/blog</link><description>Practical perspectives on cybersecurity and cloud infrastructure.</description><language>en</language><item><title><![CDATA[Barracuda ESG Exploitation: Treat Internet-Exposed Admin Interfaces as an Incident]]></title><description><![CDATA[Barracuda confirms active exploitation of a chained ESG flaw. Learn which devices are exposed, why it matters, and the actions security teams should take.]]></description><link>https://www.darcherif.fr/blog/barracuda-esg-exploitation</link><guid>https://www.darcherif.fr/blog/barracuda-esg-exploitation</guid><pubDate>Wed, 11 Nov 2026 00:00:00 GMT</pubDate><category>Email Security</category></item><item><title><![CDATA[A Shared Hosting Breach Shows Why Tenant Isolation Cannot Be a Single Control]]></title><description><![CDATA[Hostinger’s shared-hosting incident shows why tenant isolation, rapid containment and customer credential protection must be treated as one response problem.]]></description><link>https://www.darcherif.fr/blog/shared-hosting-breach-tenant-isolation</link><guid>https://www.darcherif.fr/blog/shared-hosting-breach-tenant-isolation</guid><pubDate>Tue, 10 Nov 2026 00:00:00 GMT</pubDate><category>Cloud Security</category></item><item><title><![CDATA[Iris Plaza Cloud Breach Shows Why Third-Party Data Risk Is an Operational Risk]]></title><description><![CDATA[Iris Plaza’s cloud breach shows why third-party data inventories, shutdown playbooks and credential-risk controls matter after a breach at scale for retailers.]]></description><link>https://www.darcherif.fr/blog/iris-plaza-cloud-breach-third-party-data-risk</link><guid>https://www.darcherif.fr/blog/iris-plaza-cloud-breach-third-party-data-risk</guid><pubDate>Mon, 09 Nov 2026 00:00:00 GMT</pubDate><category>Cloud Security</category></item><item><title><![CDATA[SonicWall SSL VPN MFA Bypass Is Being Exploited—Why Identity Architecture Now Becomes the Priority]]></title><description><![CDATA[Actively exploited SonicWall SSL VPN flaw CVE-2026-19868 can bypass SAML MFA. What it means, who is exposed, and what to do now.]]></description><link>https://www.darcherif.fr/blog/sonicwall-ssl-vpn-mfa-bypass-cve-2026-19868</link><guid>https://www.darcherif.fr/blog/sonicwall-ssl-vpn-mfa-bypass-cve-2026-19868</guid><pubDate>Sun, 08 Nov 2026 00:00:00 GMT</pubDate><category>Network Security</category></item><item><title><![CDATA[DDoS attacks: how they work and how to prepare]]></title><description><![CDATA[A practical guide to distributed denial of service attacks, the different ways they disrupt services, and how organizations can prepare and respond.]]></description><link>https://www.darcherif.fr/blog/ddos-what-is-it-how-does-it-work-and-how-to-be-protected</link><guid>https://www.darcherif.fr/blog/ddos-what-is-it-how-does-it-work-and-how-to-be-protected</guid><pubDate>Thu, 27 Apr 2023 00:00:00 GMT</pubDate><category>DDoS Protection</category></item></channel></rss>