John Heasman is blogging

Summary: PortSwigger's Dafydd Stuttard announced that his former NGS colleague John Heasman has started blogging. Stuttard describes Heasman as a security researcher who has reported numerous bugs in enterprise software products and developed new ideas in rootkit research, and says the blog will cover software security including browser security and Java.
Bottom line: The post is a pointer to a researcher whose bug reports landed in enterprise software products and whose rootkit work broke new ground - a signal worth following for anyone tracking where enterprise software weaknesses get found.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026