September 2026
CVE-2026-86060: MikroTik RouterOS MikroTrick policy-mask privilege escalationNew!!
CISA lists CVE-2026-86060 as exploited. TechGeeks action notice for MikroTik RouterOS MikroTrick policy-mask privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2026-76461: Cisco Secure Email Gateway crafted-email root command executionNew!!
CISA lists CVE-2026-76461 as exploited. TechGeeks action notice for Cisco Secure Email Gateway crafted-email root command execution, with scope, remediation, investigation guidance, and official sources.
CVE-2026-58704: Pixel cellular-modem privilege escalationNew!!
CISA lists CVE-2026-58704 as exploited. TechGeeks action notice for Pixel cellular-modem privilege escalation, with scope, remediation, investigation guidance, and official sources.
CVE-2026-76460: Cisco ISE authentication bypass is actively exploitedNew!!
CISA lists CVE-2026-76460 as exploited. TechGeeks action notice for Cisco ISE authentication bypass is actively exploited, with scope, remediation, investigation guidance, and official sources.
RPKI, IRR, and ROA MaxLength: Routing Hygiene for Enterprises That Own PrefixesNew!!
A routing-hygiene guide for enterprises that announce public prefixes, covering RPKI ROAs, IRR objects, ROA maxLength risk, and provider turn-up checks.
Fix Sticky Wi-Fi Clients: 802.11k/v/r, Minimum RSSI, and Roaming TestsNew!!
A practical sticky-client Wi-Fi guide: AP placement, transmit power, 802.11k/v/r, minimum RSSI, Apple behavior, controller settings, and roaming tests.
RouterOS Device Mode Can Silently Disable PisoWiFi HotSpotNew!!
A documentation-backed, testable runbook for RouterOS Device Mode Can Silently Disable PisoWiFi HotSpot, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
DNS Privacy vs DNS Filtering: Stop Mixing Up the JobsNew!!
A DNS guide explaining the difference between encrypted DNS, DNSSEC, Protective DNS, malware filtering, parental controls, and resolver bypass.
SMS MFA Is Going Away: A Household Migration PlanNew!!
A household MFA migration plan for moving from SMS codes to authenticator apps, passkeys, security keys, recovery codes, and carrier protections.
Local Water Meter Monitoring: Privacy, Radio Data, and Safe SetupNew!!
Build a receive-only water-monitoring workflow without opening or modifying utility equipment. Check authorization, radio and cloud dependencies, data retention, leak alerts, and what detailed usage can reveal about a household.