Explore. Create. Inspire.
Welcome to my personal corner of the internet. Here I share technical deep-dives and pieces of my life story.
Fresh from the blog
Latest Stories
Your Firmware Update Tool Has a Root Bug. Audit Your Dell DSU Fleet This Week.
On October 1, Dell published security advisory DSA-2026-324 for Dell System Update, the CLI tool admins use to push BIOS, firmware, and driver packages to PowerEdge servers. The tool whose job is to a...
You Patched NetScaler on Sunday. Citrix Wants You to Patch Again.
Three days ago I wrote about the NetScaler zero-days that landed on a Sunday, and the point was simple: the upgrade is step two, not step one. Look for signs of compromise first, then patch. This post...
Exchange Online Enforces the EWS Allow List on October 10. Build Yours This Week.
On October 10, setting EwsEnabled to $true in Exchange Online stops meaning what it used to mean. From that date, per Microsoft 365 Message Center post MC1485116, the switch alone no longer grants any...
Entra ID Starts Blocking Injected Scripts on Sign-Ins Mid-October. Test Your Extensions Now.
Starting mid-October 2026, Microsoft will enforce a strict Content Security Policy on browser-based Entra ID sign-ins. Only scripts served from trusted Microsoft CDN domains will be allowed to run on ...
The FortiMail Zero-Day Has No Patch Yet. Your Only Fix Right Now Is the Workaround.
On Thursday, October 1, Fortinet published PSIRT advisory FG-IR-26-175 for CVE-2026-104286, a critical FortiMail flaw the vendor confirmed was already being exploited in the wild. The numbers are the ...
The NetScaler Zero-Days Landed on a Sunday. The Upgrade Is Step Two, Not Step One.
On Saturday, September 26, some network administrators got strange advice from their vendors and national security teams: take your NetScaler appliances offline. No one would say why. The advisory did...
Azure Broke Its Own Network Last Night. The Only Part You Control Is Your Runbook.
Last night at 20:30 UTC, Microsoft's own maintenance broke its own cloud. An infrastructure OS servicing activity — the kind of background patching every ops team does — took down or degraded ExpressR...
Seven Minutes to Delete an Azure Tenant. The Guardrails That Held Were Boring — and That's the Point.
On September 25, Microsoft Security Research published a detailed incident report about Storm-3168 — the actor it links to JADEPUFFER, the "agentic ransomware" crew Sysdig documented in July. The head...
Octopus Deploy Has an RCE With No Workaround. The Upgrade Is the Fix — Patch It Like This.
On September 14, Octopus Deploy shipped fixed builds for CVE-2026-101169, a high-severity remote code execution flaw in Octopus Server (CVSS 8.7). The trigger is insecure deserialization (CWE-502): an...