Self-hosting infrastructure, network architecture, monitoring, automation, hardening, and system administration.
self-hosting
Copy Fail (CVE-2026-31431) lets any local user write 4 bytes into the page cache of any readable file, and one 732-byte script turns that into root. Container isolation never touched the page cache: rootless Podman stops the root, not the poisoned binary your other containers execute.
Threat Intel
Executive summary A pair of high-severity flaws in TrueConf Server lets an unauthenticated attacker take over the server and replace every client installer it distributes — a one-box supply-chain compromise. Both CVEs were added to CISA's Known Exploited Vulnerabilities catalog on 2026-08-20 with enforcement
Threat Intel
Self-hosted Metabase, version x.58.0 through x.63.4, has an unauthenticated SQL injection in POST /api/session/reset_password that writes straight into the application database (the one holding accounts, connections, and settings, not your warehouse). An attacker who reaches that endpoint gets admin of the instance
self-hosting
A practical comparison for homelab operators deciding whether to self-host WireGuard mesh VPN control plane or trust Tailscale's managed SaaS.
research
Hands-on checklist for homelab operators: detect, fingerprint, and harden exposed MCP endpoints running on Ollama, Claude Code agents, or custom self-hosted AI services. Based on Trend Micro research documenting ~1,500 unauthenticated servers in 2026.
research
GhostLock is a Linux kernel use-after-free in futex priority inheritance. Patch and verification guidance for operators running containers, virtual machines, and CI jobs.
langflow
Langflow has THREE critical vulnerabilities actively exploited in the wild. With ~7,000 instances exposed on public internet and auto-login enabled by default, homelab operators are prime targets.
AI/LLM Generated
The Ollama MLX Shift: What Homelab Operators Need to Know About Local AI Performance in 2026 TL;DR Ollama's switch to Apple MLX in version 0.19 (March 2026) isn't a platform replacement — it's an acceleration path for Apple Silicon with zero impact on
self-hosting
A data-driven analysis of 30 days of reverse proxy traffic reveals 1.16 million malicious requests — about one attack every 22 seconds. Here's what attackers actually want and how to defend against each family on a homelab budget.