Brock Kjelden
Security Consultant
In his four-year cybersecurity career, Brock has built a centralized Security Operations Center (CSOC) for a Midwest retailer, implementing XDR, SIEM, firewalls, and endpoint controls. At NetSPI, he contributes by creating attack chains and proof-of-concepts (POCs) for internal testing teams, translating complex tools into reproducible steps using platforms like Burp Suite.
Brock holds a CompTIA Security+ certification and is pursuing his OSCP. He is dedicated to advancing his expertise and supporting NetSPI’s mission to enhance client security.
More By Brock Kjelden
CVE-2026-20127 – Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Overview & Takeaways
February 27, 2026
A critical authentication bypass vulnerability (CVE-2026-20127) has been identified in Cisco Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated, remote attackers to gain administrative privileges on affected systems. Exploitation in the wild has been confirmed, and immediate action is required to mitigate risk.
CVE-2026-1731 – BeyondTrust RCE Overview and Takeaways
February 12, 2026
Learn about CVE-2026-1731, a critical RCE vulnerability in BeyondTrust RS & PRA products. Discover its impact, affected versions, and remediation steps.
Ivanti Endpoint Manager Mobile (EPMM) [CVE-2026-1281 & CVE-2026-1340]: Overview & Takeaways
January 30, 2026
Ivanti has disclosed two critical zero‑day vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE‑2026‑1281 and CVE‑2026‑1340. Both vulnerabilities have been exploited in active attacks and allow unauthenticated remote threat actors to compromise EPMM appliances.
Oracle WebLogic Server Proxy Plugin (CVE-2026-21962): Overview & Takeaways
January 22, 2026
CVE-2026-21962 allows an unauthenticated remote attacker to bypass security controls and potentially gain unauthorized access to backend WebLogic systems. Because these proxy plugins often sit in DMZ environments, the exposure is significant.