How-To: Lock Admin Web UIs to Your Own Networks With nginx
Today’s VeloCloud news is one more reminder: admin web interfaces shouldn’t answer to the whole internet. Here’s the simple nginx pattern I use in front of…
Category
Security
Follow Security via RSSHow-To: A Home Lab Checklist After the LiteLLM and PHP2Shell Attacks
Two big attacks this week, the trojaned LiteLLM 1.107.0 and PHP2Shell, are good reasons to run through a quick check of any home lab. Here’s the…
Arista Patches an Exploited VeloCloud Orchestrator Zero-Day. Lock Down That Web UI
If you run VeloCloud SD-WAN with an on-prem Orchestrator, put this at the top of your list. Arista released fixes for CVE-2026-114625, a critical, actively exploited…
Cisco Expressway Bug Lets Attackers Run Commands as Root. Patch Now
Cisco’s October 21 advisory bundle is out, and the big one is a remote code execution bug in Cisco Expressway (Expressway-C and Expressway-E). What to know…
OpenBSD 8.0: Bigger VMs, Faster Encrypted Swap and a Taste of Wine
OpenBSD 8.0, the project’s 61st release, is out. Highlights The vmm/vmd hypervisor now runs multiprocessor VMs with up to 64 vCPUs. Kernel virtual address space on…
LiteLLM 1.107.0 Was Trojaned: Check for It and Rotate Your AI Keys
Attackers compromised LiteLLM’s release process on Wednesday and pushed a malicious 1.107.0 to PyPI and Docker. It steals cloud and AI credentials and drops a remote…
Update: Microsoft Says the ConnectWise Breach Hit 2,250 Cloud Tenants
Update to my earlier ConnectWise post. Microsoft says a China-linked group it tracks as Storm-0940 used compromised ConnectWise app credentials and AI agents to go after…
PHP2Shell: Two Critical PHP Flaws Allow Remote Code Execution. Patch Today
If you run anything on PHP, and that includes every WordPress site out there, stop what you’re doing. On October 21 the PHP team shipped emergency…
How-To: Patch PHP on a WordPress Server for PHP2Shell
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a pre-auth remote code execution bug in PHP itself, so every WordPress box needs attention today. Here’s the checklist I’d run…
Linus Kills the Unsafe __get_user() and __put_user() in Linux 7.4, With a Little Help From Claude
Linus Torvalds merged his own branch removing the old __get_user() and __put_user() kernel functions for Linux 7.4. Why it matters They’re the faster but unchecked versions…