@damianobianda

Damiano Bianda

@damianobiandaJoined October 2026

Full-stack developer: Nuxt, Vue, TypeScript, Python. Based in Ticino.

About

Nothing here yet.

Available for

Nothing here yet.

Damiano Bianda's blogs

Damiano Bianda's Dev Notesdamianobianda.hashnode.dev26 posts

No Ransom Note: Europe's Freezer Attacks and the New Sabotage Playbook

On the night of Monday, November 2, supermarket freezers in at least ten European countries quietly stopped being freezers. Remote refrigeration controllers were pushed into maximum-temperature defros

3h ago · 6 min readdamianobianda.hashnode.dev

Your MFA Didn't Fail. It Was Never Asked: the SonicWall SAML Bypass

There is a special kind of security incident in which every control you configured worked exactly as designed, and you got breached anyway. CVE-2026-19868, an authentication-enforcement vulnerability

1d ago · 5 min readdamianobianda.hashnode.dev

The Chainalysis Breach: From "No Credentials Accessed" to "All Users Exposed" in Five Days

On October 30, 2026, Chainalysis told its customers it had been the target of a cybersecurity incident - and that it had "found no evidence of unauthorized access to investigation content, authenticat

2d ago · 6 min readdamianobianda.hashnode.dev

The Bug Apple Patched 18 Months Ago Is Now on CISA's Exploited List

On November 4, 2026, CISA added CVE-2024-27834 to its Known Exploited Vulnerabilities catalog. The entry is one line long: "Apple Multiple Products Improper Authentication Vulnerability." Behind that

3d ago · 5 min readdamianobianda.hashnode.dev

The Update Button Is the Attack Surface: Inside WordPress CVE-2026-119977

Yesterday's article looked at Microsoft's analysis of 2,056 exploited CVEs and what real-world exploitation has in common. Twenty-four hours later, the pattern has a live case study. On November 3, CI

4d ago · 5 min readdamianobianda.hashnode.dev

Damiano Bianda

About

Available for

Damiano Bianda's blogs

No Ransom Note: Europe's Freezer Attacks and the New Sabotage Playbook

Your MFA Didn't Fail. It Was Never Asked: the SonicWall SAML Bypass

The Chainalysis Breach: From "No Credentials Accessed" to "All Users Exposed" in Five Days

The Bug Apple Patched 18 Months Ago Is Now on CISA's Exploited List

The Update Button Is the Attack Surface: Inside WordPress CVE-2026-119977

Search Hashnode

Damiano Bianda

About

Available for

Damiano Bianda's blogs

No Ransom Note: Europe's Freezer Attacks and the New Sabotage Playbook

Your MFA Didn't Fail. It Was Never Asked: the SonicWall SAML Bypass

The Chainalysis Breach: From "No Credentials Accessed" to "All Users Exposed" in Five Days

The Bug Apple Patched 18 Months Ago Is Now on CISA's Exploited List

The Update Button Is the Attack Surface: Inside WordPress CVE-2026-119977