Founder and owner
Rank Math SEO PRO 3.0.123 contained malware, and UpdraftCentral connection keys were stolen at TeamUpdraft. Here is who is affected, how to check your WordPress installation and what to do if you find something.
Two vulnerabilities in PHP allow remote code execution, both rated CVSS 9.2. How we switched things off before the patch, when each system went back online, and what is behind the claims about bypasses.
A guest breaks out of its KVM VM and gets root on the host: PwnEscape (CVE-2026-99999) is rated critical with CVSS 9.8. What the vulnerability is, who it affects, and how you check in five steps whether your kernel already closes it.
After the October 13, 2026 Patch Tuesday, Remote Desktop connections from non-administrators fail with 0xC000000D. Microsoft names Administrator Protection as the trigger. Here is who is affected, what the official workaround is and what to keep in mind with Windows servers.
Since October 13, 2026, Microsoft has begun blocking the remnants of NTLMv1 in Windows 11 24H2 and Windows Server 2025 via update. Here is what changes, who is affected, and how to check in five steps whether anything breaks on your Windows root server.
OpenSSH 10.6 fixes eleven security bugs, and Debian 12 and 13 don't have a package yet. We checked which vulnerabilities apply with default settings and how you can defuse them until the update arrives.
On September 29, 2026, the OpenSSL project closed a severe DTLS vulnerability (CVE-2026-84782, CVSS 8.8). Here is which versions are affected, which version you should update to, and how to check that the update actually takes effect.
CERT-Bund is warning about vulnerabilities in Froxlor. If you run the hosting panel on your own root server, you should check the version, its reachability and the system for traces. This post gives the order to work through.
CERT-Bund has published an advisory on Webmin. If an admin panel with root privileges is running on your root server, now's a good time for a five-minute check: version, reachability, access restriction.
Microsoft is retiring VBScript – and with it, in the medium term, slmgr.vbs, the standard tool for command-line activation of Windows. The replacement is called OSLicense: a PowerShell module with eleven cmdlets that's supposed to show up in Windows 11 25H2, while Windows Server won't catch up until the next major release. What this means for admins who script activation today.
CERT-Bund reports a privilege escalation in NetworkManager on RHEL/CentOS derivatives under WID-SEC-2026-2977. What this means for root servers running AlmaLinux, Rocky Linux and similar distributions, how to check your version and apply updates — step by step, including a warning about restarting remotely.
A missing or incorrect PTR record is one of the most common reasons self-hosted mail servers end up in the spam folder or get rejected outright. Here's how to find out what's set for your IP, and how to fix it.
