Security tools
2 articles
Affiliate programsSecurity tools
Affiliate programs for security tools: what each one actually pays
We run the HOL Guard affiliate program, so we spend a lot of time reading other programs' terms pages. This post is the list we would hand to a writer who covers security tools and wants to know which programs are open, what they pay, and where the gaps are.
HOLBreakingCVE
CVE-2026-74764 - Pandora TAR Path Traversal Enables Arbitrary File Write
CVE-2026-74764 is a CVSS 10.0 path traversal in Pandora TAR extraction that lets untrusted archives write outside the analysis directory. v1.12.5 is affected; deploy the upstream fix.
HOL GuardRelated topics
Keep exploring
The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.