PowerShell 7.6 LTS: what changed and how to migrate from 5.1
PowerShell 7.6 LTS arrived in March 2026 with .NET 10. Here are the main changes, how to install it via winget and why …
TECHNOLOGY
Technology 186 posts
News, tutorials and takes on the tech world — with a heavy focus on information security.
SolarWinds Serv-U: CVE-2026-28318 downs a server with one POST
CISA added CVE-2026-28318 to the KEV: a POST with deflate takes down Serv-U without authentication. More than 12,000 …
CVE-2026-50751: Qilin exploits a Check Point VPN zero-day
Qilin ransomware exploited CVE-2026-50751 in Check Point VPN for 31 days before the patch. The IKEv1 zero-day bypasses …
Miasma: supply chain worm infects 32 Red Hat npm packages
On 1 June, the Miasma worm compromised 32 Red Hat npm packages and stole AWS, Azure, GCP and Kubernetes credentials …
SSH hardening: 5 settings that close 95% of the vectors
Weak password + port 22 open = an invitation to brute force. Here are the exact sshd_config changes to lock down SSH on …
DragonForce ransomware: the cartel that took down M&S and Co-op
DragonForce took down Marks & Spencer with a phone call to the helpdesk: it stole NTDS.dit and locked ESXi. A cartel …
MOVEit: 3 years on from the zero-day that exposed 93 million records
On 31 May 2023, CVE-2023-34362 in MOVEit Transfer became the largest supply chain attack by SQL injection in history, …
CISA leaked AWS GovCloud credentials on GitHub for 6 months
A CISA contractor published AWS GovCloud account credentials, SSH keys and plain-text passwords in a public repo — and …
Carnival Corporation: 6m customers leaked by ShinyHunters
Carnival Corporation had 6 million customers exposed after ShinyHunters tricked an employee through social engineering …
MFA Fatigue: the attack that turns your 2FA against you
Push bombing needs no zero-day — just the patience to spam notifications until you approve. How MFA fatigue works and …