https://0x870x4k3r.tech/blog/ Technical notes on Linux, infrastructure, security practice, and operational work. en Sun, 08 Nov 2026 23:22:45 GMT https://0x870x4k3r.tech/blog/linux-hosting-security-review-nginx-rpki-package-trust-backup-recovery-2026-11-07/ https://0x870x4k3r.tech/blog/linux-hosting-security-review-nginx-rpki-package-trust-backup-recovery-2026-11-07/ Sat, 07 Nov 2026 00:00:00 GMT A 7 November 2026 Linux hosting and security review covering NGINX, FRRouting RPKI, HAProxy, APT, ImageMagick, Symfony, Beget recovery and the checks that matter in production. https://0x870x4k3r.tech/blog/beget-ivanti-php2shell-infrastructure-security-roundup-02-11-2026/ https://0x870x4k3r.tech/blog/beget-ivanti-php2shell-infrastructure-security-roundup-02-11-2026/ Mon, 02 Nov 2026 00:00:00 GMT A major Beget outage collides with an actively exploited Ivanti root chain, PHP2Shell, fresh Debian security fixes and a new Yandex Cloud recovery phase. For infrastructure teams, today is about both compromise and keeping production alive. https://0x870x4k3r.tech/blog/ivanti-php2shell-linux-root-security-roundup-01-11-2026/ https://0x870x4k3r.tech/blog/ivanti-php2shell-linux-root-security-roundup-01-11-2026/ Sun, 01 Nov 2026 00:00:00 GMT Ivanti VPN gateways are being rooted through a multi-stage zero-day chain, PHP2Shell is combining with an exploited Linux kernel flaw, and new VMmanager, NGINX, Brotli and trust-store fixes show why patch status alone is no longer a useful definition of security. https://0x870x4k3r.tech/blog/php2shell-linux-root-vmmanager-security-roundup-31-10-2026/ https://0x870x4k3r.tech/blog/php2shell-linux-root-vmmanager-security-roundup-31-10-2026/ Sat, 31 Oct 2026 00:00:00 GMT Active exploitation of PHP and Linux kernel flaws creates a realistic remote-to-root attack chain, while VMmanager postmortems, NGINX mTLS bugs, DPDK fixes and Yandex Cloud recovery expose weaknesses far beyond the web application itself. https://0x870x4k3r.tech/blog/thirteen-days-broke-security-model-php2shell-supply-chain-hypervisor-compromise/ https://0x870x4k3r.tech/blog/thirteen-days-broke-security-model-php2shell-supply-chain-hypervisor-compromise/ Fri, 30 Oct 2026 00:00:00 GMT Between October 18 and 30, Linux hosting faced actively exploited PHP and kernel flaws, a CVSS 10.0 GitLab RCE, poisoned software releases, VMmanager compromise and a brutal lesson in cloud recovery. https://0x870x4k3r.tech/blog/cisco-pan-os-debian-security-roundup-17-10-2026/ https://0x870x4k3r.tech/blog/cisco-pan-os-debian-security-roundup-17-10-2026/ Sat, 17 Oct 2026 00:00:00 GMT Cisco Secure Email Gateway is under active attack through a pre-authentication path to root, PAN-OS management interfaces are being exploited, and Debian administrators face fresh Apache, kernel and CIFS security updates. https://0x870x4k3r.tech/blog/beyondtrust-ahsay-gitlab-security-roundup-16-10-2026/ https://0x870x4k3r.tech/blog/beyondtrust-ahsay-gitlab-security-roundup-16-10-2026/ Fri, 16 Oct 2026 00:00:00 GMT BeyondTrust and AhsayCBS are under active exploitation, Atlassian joins CISA KEV, GitLab ships a CVSS 10.0 RCE fix, and Ubuntu patches Apache, OpenSSH, BIND and curl in one of the busiest infrastructure security weeks of October. https://0x870x4k3r.tech/blog/ivanti-drupal-ubuntu-kernel-security-roundup-14-10-2026/ https://0x870x4k3r.tech/blog/ivanti-drupal-ubuntu-kernel-security-roundup-14-10-2026/ Wed, 14 Oct 2026 00:00:00 GMT Ivanti Connect Secure is under active zero-day exploitation, Drupal is preparing a critical core security release, and Ubuntu has shipped a massive kernel update. Here is what actually matters for Linux hosting and production infrastructure on October 14. https://0x870x4k3r.tech/blog/nagios-keystone-yandex-cloud-security-roundup-13-10-2026/ https://0x870x4k3r.tech/blog/nagios-keystone-yandex-cloud-security-roundup-13-10-2026/ Tue, 13 Oct 2026 00:00:00 GMT Fresh Nagios, OpenStack Keystone, FFmpeg and Google Guest Agent vulnerabilities put monitoring, identity and automation infrastructure under scrutiny, while Yandex Cloud publishes practical disaster-recovery guidance after damage to three data centers. https://0x870x4k3r.tech/blog/ghostscript-libvips-yandex-cloud-security-roundup-12-10-2026/ https://0x870x4k3r.tech/blog/ghostscript-libvips-yandex-cloud-security-roundup-12-10-2026/ Mon, 12 Oct 2026 00:00:00 GMT Fresh Ghostscript, libvips and Perl DBI security fixes put automated file processing under scrutiny, while FortiMail remains actively exploited and Yandex Cloud is still recovering from the loss of two availability zones. https://0x870x4k3r.tech/blog/three-data-centers-down-apache-rces-cloud-resilience-11-10-2026/ https://0x870x4k3r.tech/blog/three-data-centers-down-apache-rces-cloud-resilience-11-10-2026/ Sun, 11 Oct 2026 00:00:00 GMT A third Yandex data center is offline as Apache memory bugs, Ubuntu kernel fixes, libxml2 flaws, Unbound issues, and other Linux security updates put both patching and disaster recovery under pressure. https://0x870x4k3r.tech/blog/apache-yandex-cloud-linux-security-roundup-10-10-2026/ https://0x870x4k3r.tech/blog/apache-yandex-cloud-linux-security-roundup-10-10-2026/ Sat, 10 Oct 2026 00:00:00 GMT Apache memory bugs, fresh Ubuntu kernel fixes, libgit2 TLS validation problems, XML parser flaws, and a second damaged Yandex data center turn this week's security brief into a lesson about both software trust and infrastructure resilience. https://0x870x4k3r.tech/blog/xz-libxml2-yandex-cloud-security-roundup-09-10-2026/ https://0x870x4k3r.tech/blog/xz-libxml2-yandex-cloud-security-roundup-09-10-2026/ Fri, 09 Oct 2026 00:00:00 GMT A dangerous xz-utils memory bug, six libxml2 vulnerabilities, fresh Ubuntu kernel fixes, a JWT verification flaw, and a major Yandex Cloud outage make this week's infrastructure security picture much bigger than another patch cycle. https://0x870x4k3r.tech/blog/dns-roundcube-redis-docker-security-roundup-07-10-2026/ https://0x870x4k3r.tech/blog/dns-roundcube-redis-docker-security-roundup-07-10-2026/ Wed, 07 Oct 2026 00:00:00 GMT Ubuntu patches RCE-class bugs in Unbound, Debian ships major Roundcube and Redis security updates, Apache releases 2.4.69, and real attackers are abusing exposed Docker APIs. https://0x870x4k3r.tech/blog/netscaler-zammad-gitlab-ai-gateway-security-roundup-06-10-2026/ https://0x870x4k3r.tech/blog/netscaler-zammad-gitlab-ai-gateway-security-roundup-06-10-2026/ Tue, 06 Oct 2026 00:00:00 GMT A new exploited NetScaler vulnerability, a real-world Zammad compromise chain, and a CVSS 9.9 GitLab AI Gateway RCE make October 6 another uncomfortable day for infrastructure teams. https://0x870x4k3r.tech/blog/zimbra-zero-click-mail-security-roundup-05-10-2026/ https://0x870x4k3r.tech/blog/zimbra-zero-click-mail-security-roundup-05-10-2026/ Mon, 05 Oct 2026 00:00:00 GMT Zimbra exploitation has escalated from a mail-server vulnerability into full host compromise, root persistence, lateral movement, and theft of authentication secrets. FortiMail, Cisco SD-WAN, NetScaler, MikroTik, and major Linux security rollouts keep the rest of the infrastructure queue just as uncomfortable. https://0x870x4k3r.tech/blog/fortimail-zero-day-infrastructure-security-roundup-04-10-2026/ https://0x870x4k3r.tech/blog/fortimail-zero-day-infrastructure-security-roundup-04-10-2026/ Sun, 04 Oct 2026 00:00:00 GMT The FortiMail zero-day remains the week's top infrastructure emergency, while Cisco SD-WAN and NetScaler exploitation, major kernel rollouts, OpenVPN flaws, and overdue DNS and mail updates keep pressure on production teams. https://0x870x4k3r.tech/blog/fortimail-zero-day-infrastructure-security-roundup-03-10-2026/ https://0x870x4k3r.tech/blog/fortimail-zero-day-infrastructure-security-roundup-03-10-2026/ Sat, 03 Oct 2026 00:00:00 GMT FortiMail joins Cisco SD-WAN and Citrix NetScaler in the actively exploited category, while major Debian and Ubuntu kernel updates, mail-stack patches, VPN fixes, and DNS maintenance demand attention across production fleets. https://0x870x4k3r.tech/blog/infrastructure-security-roundup-cisco-netscaler-linux-02-10-2026/ https://0x870x4k3r.tech/blog/infrastructure-security-roundup-cisco-netscaler-linux-02-10-2026/ Fri, 02 Oct 2026 00:00:00 GMT A practical infrastructure security roundup for September 25–October 1, 2026: actively exploited Cisco SD-WAN and NetScaler flaws, Linux kernel and OpenSSL updates, mail and DNS maintenance, WordPress exposure, and MikroTik attacks. https://0x870x4k3r.tech/blog/infosec-roundup-kiteworks-tdengine-elementor-opendmarc-29-09-2026/ https://0x870x4k3r.tech/blog/infosec-roundup-kiteworks-tdengine-elementor-opendmarc-29-09-2026/ Tue, 29 Sep 2026 00:00:00 GMT A September 29 security roundup covering the Kiteworks Advanced Forms emergency, a pre-auth TDengine crash bug, Elementor administrator takeover, new OpenDMARC parser flaws, and Ubuntu LXC security updates. https://0x870x4k3r.tech/blog/infosec-roundup-netscaler-sharepoint-wordpress-28-09-2026/ https://0x870x4k3r.tech/blog/infosec-roundup-netscaler-sharepoint-wordpress-28-09-2026/ Mon, 28 Sep 2026 00:00:00 GMT Two Citrix NetScaler RCE zero-days were exploited before patches existed. SharePoint and WordPress attacks are now confirmed, while Linux container hosts and Apache Camel K face serious isolation risks. https://0x870x4k3r.tech/blog/infosec-roundup-peoplesoft-gitea-servicenow-bind-27-09-2026/ https://0x870x4k3r.tech/blog/infosec-roundup-peoplesoft-gitea-servicenow-bind-27-09-2026/ Sun, 27 Sep 2026 00:00:00 GMT A September 27 security roundup covering active exploitation of Oracle PeopleSoft and Gitea, new critical ServiceNow vulnerabilities, a major BIND 9 security update, and PostgreSQL privilege escalation. https://0x870x4k3r.tech/blog/infosec-roundup-wso2-magento-linux-rdma-26-09-2026/ https://0x870x4k3r.tech/blog/infosec-roundup-wso2-magento-linux-rdma-26-09-2026/ Sat, 26 Sep 2026 00:00:00 GMT CISA confirms active exploitation of critical WSO2 and Adobe Commerce vulnerabilities, while new Linux kernel flaws affect RDMA and RPC infrastructure. Ubuntu also ships another major wave of kernel security updates. https://0x870x4k3r.tech/blog/infosec-roundup-24-25-092026/ https://0x870x4k3r.tech/blog/infosec-roundup-24-25-092026/ Fri, 25 Sep 2026 00:00:00 GMT A security roundup for September 24–25, 2026, covering critical vulnerabilities affecting cPanel, Ubuntu container hosts, Roundcube, TeamCity, F5 BIG-IP, VeloCloud, WordPress, Tomcat, SolarWinds, and FreeIPA.