OverviewThis week did not leave much room for leisurely patch testing. Attackers are already chaining MikroTik RouterOS flaws to take over internet-exposed routers, Microsoft fixed two Windows privilege-escalation bugs under active exploitation, Google shipped another Chrome zero-day update, and Cisco confirmed that...

N-able has released four N-central hotfixes in five weeks.The latest, N-central 2026.3 Hotfix 4, fixes CVE-2026-86218: a pre-authentication remote code execution vulnerability rated 10.0 under CVSS 4.0. N-able says every version before build 2026.3.1.14 is affected. CISA added the flaw to its Known Exploited...

I have spent the past few days using OpenAI’s GPT-6 Astra across the kind of work I normally do: research, code, troubleshooting, and security analysis. What stands out is not one clever answer, but how long Astra can stay with a problem.It can inspect the work in front of it, use tools, test an idea, notice that...

The past two weeks got away from me. We found a new house, moved almost immediately, and have been trying to get settled ever since, so I decided to combine Weeks 35 and 36 into one post.The vibeWhiplashed, exhausted, and relieved.Everything happened much faster than I expected, and moving is never fun, but we are...

OverviewThis week put exposed edge systems, trusted login paths, and internet-facing business software back at the front of the queue. SonicWall and Sangoma confirmed exploitation against remote-access and phone-system products, Google patched another Chrome zero-day, and CISA added seven flaws spanning appliances,...

I spent most of this weekend moving, so Friday’s edition slipped past me. I am publishing it late rather than pretending the week was quiet.OverviewPaperCut and NetScaler both moved into active-exploitation territory, Next.js shipped fixes for two critical remote-code-execution flaws, and another trusted npm...

It has been a while since I updated this page, and quite a bit has happened since the last one. I am still writing about security and working in the MSP world. Outside of that, I have spent a lot of time on self-hosting, physical media, and building tools that solve problems I keep running into myself.Here is where...

Part 4 of the Light Offensive to Think Defensively track in my CybersecKyle Security How-To Series closes the series by turning one verified lab observation into work an owner can understand, schedule, fix, and retest.A scanner screenshot is not a finding, and a finding is not automatically the organization’s risk...

On July 31, N-able detected a threat actor exploiting a previously unknown vulnerability in N-central. By August 1, the company had published guidance. Hotfix 1 arrived on August 2. Continued monitoring found a related attack path, so Hotfix 2 followed on August 6. That is already a difficult timeline for any IT or...

The vibeDrained, proud, and ready for a cold front.I did not feel like myself for much of the week, but I still had a few things I was genuinely happy about. I am hoping the sick feeling passes soon and Texas remembers that summer does eventually have to end.Highlights🛠️ I released ReelArrange 0.3.0 and RipFoundry...

Part 3 of the Light Offensive to Think Defensively track in my CybersecKyle Security How-To Series examines what a lab target reveals before authentication and how its identity controls respond to a small, authorized set of failed sign-ins.This exercise stays inside the isolated lab from Part 1. The target, users,...

This is a little outside the kind of thing I normally write about here, but I have been following the discussion around MacStories returning to Twitter/X over the last couple of days, and I kept finding myself thinking about it.Federico Viticci is someone I have followed for years through MacStories. Obviously there...