12 November, 2026
GitLab CVE-2026-97229: Patch, Verify and Hunt the CI Regex RCE
GitLab CVE-2026-97229 is a CVSS 10 RCE now in CISA KEV. Find the build that really fixes it, apply stopgaps, and hunt for exploitation.
Read MoreGet new posts by email
FortiGate configs, CVE countermeasures and practitioner guides. No fluff, no spam, unsubscribe anytime.
11 November, 2026
FortiGate IPAM vs DHCP: Differences, Overlap, and What to Check Before You Turn IPAM On
FortiGate IPAM vs DHCP explained: what each one assigns, where they overlap, and what to check before enabling IPAM so it does not renumber...
Read More
11 November, 2026
Outlook CVE-2026-124194: Patch the Zero-Day That Leaks NTLM Hashes
Outlook CVE-2026-124194 leaks NTLMv2 hashes from one opened .msg file. Check fixed builds, force the Office update, and block SMB egress on FortiGate.
Read More
11 November, 2026
WHOIS Protocol: History, Limitations, and What Replaced It
Learn how the WHOIS protocol grew from a 1982 ARPANET directory, why port 43 falls short today, and what replaced it for domain lookups.
Read More
11 November, 2026
EJBCA Internal CA: Deploy a Private PKI for Your Local Servers with Docker
Deploy an EJBCA internal CA in Docker with MariaDB, build a two-tier Root and Issuing CA, and issue trusted TLS certificates to local servers.
Read More
11 November, 2026
Windows Server Audit Policy: Advanced Auditing, Command Lines, SACLs and Log Sizing
Build a Windows Server audit policy that logs what investigators need: advanced subcategories, 4688 command lines, file SACLs and log sizing.
Read More
10 November, 2026
CVE-2026-98432 Mitigation on FortiGate: Blocking the Linux Kernel TCP Use-After-Free (FG-IR-26-188)
CVE-2026-98432 mitigation for FortiGate and Linux: drop IPv4 options in the NPU, apply the FMWP virtual patch, and block the TCP trigger until you...
Read More
10 November, 2026
Fortinet PSIRT Countermeasures: Pre-Auth Bugs Trusted Hosts Won’t Stop
Fortinet PSIRT countermeasures for pre-auth FortiGate, FortiManager and FortiAnalyzer bugs on FGFM, OFTP, OSPF and HA that trusted hosts can't stop.
Read More
10 November, 2026
FortiGate IKEv2 Certificate Pinning: Machine Certificate Plus EAP-MSCHAPv2 Remote Access VPN
Set up FortiGate IKEv2 certificate pinning: require a machine certificate from your own CA before EAP-MSCHAPv2 login, with OpenSSL and CRL.
Read More
10 November, 2026
Malware in 2026: A Practitioner’s Field Guide to the Types You Will Actually See
Infostealers, ransomware, loaders, RATs, worms, botnets, wipers, EDR killers, mobile NFC relay, and the first LLM-in-the-loop families. What each one does, how it shows...
Read More
10 November, 2026
Meraki CVE-2026-76463: Find and Patch Every Affected Device
Meraki CVE-2026-76463 explained: what the 8.8 access control bundle covers, how to inventory firmware with the API, and which releases fix it.
Read More
10 November, 2026
Chrome CVE-2026-11660: New Tab Page Sandbox Escape, Verify and Enforce the Patch
Chrome CVE-2026-11660 is a New Tab Page sandbox escape. Verify fixed Chrome and Edge builds and force relaunch on Windows, macOS and Linux.
Read More
10 November, 2026
eMudhra Certificate Compromise: What Broke and How to Clean Up Your Trust Stores
The eMudhra certificate compromise explained: what broke, which clients are still exposed, and how to patch Linux, runtimes, endpoints and FortiGate.
Read More
10 November, 2026
CVE-2026-19868: SonicWall SAML MFA Bypass on SSLVPN, Patch and Hunt Guide
SonicWall SAML MFA bypass CVE-2026-19868 is exploited. Check exposure, patch SonicOS, and hunt SSLVPN logins that skipped your IdP.
Read More
10 November, 2026
nmap Companion Tools: The Command-Line Ecosystem That Reads Your Scans
nmap companion tools that read your scans: searchsploit, brutespray, gowitness, RustScan and more, plus the one flag that chains them.
Read More
10 November, 2026
OpenSSH *sshole (CVE-2026-123158): Find, Patch and Lock Down Alpine sshd
OpenSSH *sshole (CVE-2026-123158) lets a long password unlock Alpine accounts. Check exposure, patch sshd, disable passwords and hunt logs.
Read More
9 November, 2026
Spanning Tree Protocol Explained: STP vs RSTP vs MSTP (with FortiSwitch Config)
Learn how spanning tree, RSTP and MSTP elect a root and block loops, then configure MSTP on FortiSwitch so both core uplinks forward traffic.
Read More
9 November, 2026
FortiClient ZTNA Connection Refused on macOS: When pf Answers for the Server
ZTNA connection refused on macOS? Trace the instant RST to FortiClient pf rules, read the ztnahosts table, and fix the EMS destination.
Read More