Founder and owner
OpenSSH 10.6 fixes eleven security bugs, and Debian 12 and 13 don't have a package yet. We checked which vulnerabilities apply with default settings and how you can defuse them until the update arrives.
On September 29, 2026, the OpenSSL project closed a severe DTLS vulnerability (CVE-2026-84782, CVSS 8.8). Here is which versions are affected, which version you should update to, and how to check that the update actually takes effect.
CERT-Bund is warning about vulnerabilities in Froxlor. If you run the hosting panel on your own root server, you should check the version, its reachability and the system for traces. This post gives the order to work through.
CERT-Bund has published an advisory on Webmin. If an admin panel with root privileges is running on your root server, now's a good time for a five-minute check: version, reachability, access restriction.
Microsoft is retiring VBScript – and with it, in the medium term, slmgr.vbs, the standard tool for command-line activation of Windows. The replacement is called OSLicense: a PowerShell module with eleven cmdlets that's supposed to show up in Windows 11 25H2, while Windows Server won't catch up until the next major release. What this means for admins who script activation today.
CERT-Bund reports a privilege escalation in NetworkManager on RHEL/CentOS derivatives under WID-SEC-2026-2977. What this means for root servers running AlmaLinux, Rocky Linux and similar distributions, how to check your version and apply updates — step by step, including a warning about restarting remotely.
A missing or incorrect PTR record is one of the most common reasons self-hosted mail servers end up in the spam folder or get rejected outright. Here's how to find out what's set for your IP, and how to fix it.
CERT-Bund has published an advisory on security vulnerabilities in BIND under WID-SEC-2026-2484. If you run your own nameserver, we'll show you in a few steps how to check version, exposure, and configuration.
Password login over SSH is the most common way outsiders become root. Generate a key pair, disable password login, change the port, and set up fail2ban – step by step, with the commands to follow along.
A parameter in the two-factor login flow made the password check fail entirely: in Proxmox VE 7, attackers could log in as root without any credentials. The flaw was fixed by accident in July 2023, but the fix was never backported to VE 7 — and it has been actively exploited since late August. Prepaid-Host is not affected.
Hypixel Studios publishes no official server requirements — the figures in the common guides are estimates. We run Hytale servers ourselves and lay out what they actually need, what the three approaches cost, and when each one pays off.
A BGP hijack took over Virtualizor's update channel. The attacker obtained a valid Let's Encrypt certificate and shipped a tampered package. Prepaid-Host is not affected — if you run Virtualizor yourself, you should act now.
