Hardening and patching Linux servers and cloud infrastructure.
Hijacked Tor relays intercepted SSH logins in October 2026. Learn who was at risk, how to check known_hosts and how to stop the trick with key-only logins.
Tailscale SSH vulnerability guide: July root bugs fixed in 1.98.9/1.98.10, new Tailworm flaws unpatched. Update, audit SSH rules, check servers.
HTTP2Shell (CVE-2026-111497) hits Brotli in Bun, Python, Envoy, Istio and Linux distros. Fixed versions, tested checks and proxy workarounds.
The October 2026 Node.js security release fixes 10 flaws, including Node2Shell RCE. See the fixed versions and how to update servers and Docker images.
Five NGINX vulnerabilities were fixed in 1.30.6 and 1.31.7. Learn which configs are at risk, how to audit yours with nginx -T and how to patch safely.
AI agent security checklist for MCP servers and tool-calling LLM agents: threat model, 12 hardening steps, tested config, OWASP LLM Top 10 mapping.
The OVHcloud CLI was swapped for a stealer and Railway exposed environment variables. Learn who is affected and how to rotate secrets after each incident.
CVE-2026-110264 is a CVSS 10 GitLab flaw affecting every self-managed version since 7.0. Check your version, upgrade safely and spot attack attempts.
CVE-2026-110447 lets attackers plant web shells via Nextcloud's Built-in CODE Server app. Check your version, update or remove it, and hunt for compromise.
Plex2Shell lets attackers take over unpatched Plex Media Server installs without a login. Check your version, update and look for signs of malware.
