Network security architecture, firewall configuration, IDS/IPS, and secure network design.
Podcast
INC Ransomware hits 900+ victims via SonicWall SMA 1000 zero-days. npm worm ChainDrop poisoned 444+ packages with Ethereum C2 rotation. CVE-2026-59726 leaves Ruflo's MCP bridge unauthed (CVSS 10.0). Plus: TeamCity under BOD in latest KEV batch; NatJack NAT trust exploits.
Self-Hosting
Five agencies published a joint PLC advisory. Its reconnaissance playbook works against a homelab with a public IP just as well as a PLC rack. A first-person external audit of the Malwlab surface: enumeration checklist, before/after delta, and controls left behind to catch anyone scanning back.
SonicWall
SonicWall confirms active exploitation of CVE-2026-15409 and CVE-2026-15410 in SMA1000 appliances. Fixed versions, indicators, and response steps.
Self-Hosting
A practical comparison for homelab operators deciding whether to self-host WireGuard mesh VPN control plane or trust Tailscale's managed SaaS.
research
Hands-on checklist for homelab operators: detect, fingerprint, and harden exposed MCP endpoints running on Ollama, Claude Code agents, or custom self-hosted AI services. Based on Trend Micro research documenting ~1,500 unauthenticated servers in 2026.
research
GhostLock is a Linux kernel use-after-free in futex priority inheritance. Patch and verification guidance for operators running containers, virtual machines, and CI jobs.
Self-Hosting
A data-driven analysis of 30 days of reverse proxy traffic reveals 1.16 million malicious requests — about one attack every 22 seconds. Here's what attackers actually want and how to defend against each family on a homelab budget.