Network Security
Defensive network security guides for segmentation, VPNs, firewall policy, identity protection, secure remote access, logging, and recovery.
Can Fiber Internet Be Wiretapped? What the 2026 GPON Research ProvesNew!!
A detailed, evidence-backed explanation of the 2026 gpwn research: how shared GPON downstreams work, what the researchers demonstrated, what remains unproven, and what subscribers and ISPs should do.
Windows 11 24H2 Broke The Branch Share: Fix SMB Signing SafelyNew!!
A documentation-backed, testable runbook for Windows 11 24H2 Broke The Branch Share: Fix SMB Signing Safely, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
July 2026 Windows IPP Change: Test Old Office PrintersNew!!
A documentation-backed, testable runbook for July 2026 Windows IPP Change: Test Old Office Printers, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Scan-To-Email After The SMTP AUTH DelayNew!!
A documentation-backed, testable runbook for Scan-To-Email After The SMTP AUTH Delay, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Prepare For NTLM-Off WindowsNew!!
A documentation-backed, testable runbook for Prepare For NTLM-Off Windows, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Windows Server 2012/R2 Final ESU ExitNew!!
A documentation-backed, testable runbook for Windows Server 2012/R2 Final ESU Exit, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Frigate 0.17.2 Security And Exposure AuditNew!!
A documentation-backed, testable runbook for Frigate 0.17.2 Security And Exposure Audit, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Recyclarr 8.7 Security Response: Treat Template Sources as a Write Boundary
A Recyclarr security-response guide for template-provider path traversal: upgrade, inventory providers, protect secrets, compare generated files, and test safely.
Authentik 2026 Security Response
A documentation-backed, testable runbook for Authentik 2026 Security Response, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Jellyfin 10.11.10+ Security: Treat Media as Untrusted Input
Contain untrusted Jellyfin media, preserve evidence, patch to the current stable release, restrict writable paths, validate clients, and recover without returning to a vulnerable version.