Newsletter
Subscribe our newsletter
Get new infrastructure guides, comparison reports, and migration notes in your inbox.
Tag
Security
50 articles tagged Security, newest first.
Proxmox CVE-2023-54391: Who Is Actually at Risk?
CVE-2023-54391 is a critical Proxmox auth bypass that affects old package versions. Check the exact range before assuming every PVE 7 or 8 host is exposed.
22 Proxmox Nodes Hacked: What the Recovery Missed
A 22-node Proxmox cluster was compromised through CVE-2023-54391, and restoring the hosts did not remove every backdoor.
Zero Trust Against AI Social Engineering: Order Your Controls
Verify the identity, then the request, then assume both failed. The first two are deterministic, so AI-based detection belongs last.
Six AI Security Frameworks and Which One You Actually Need
OWASP, MITRE ATLAS, MAESTRO, PHANTOM-B and NIST AI RMF sorted into risk lists, methodologies and governance, with advice on which to adopt first.
VMware Workstation and Fusion CVE-2026-59346 Can Reach the Host
CVE-2026-59346 is a critical VMware Workstation and Fusion flaw that can let a privileged VM user execute code on the host through VMXNET3.
Proxmox CVE-2023-54391: Why You Should Upgrade PVE 7 Now
CVE-2023-54391 is a Proxmox VE authentication bypass affecting old libpve-access-control builds, with real compromises reported in September 2026.
Every Phishing Marker You Trained People On Is Gone
AI removed the bad grammar, generic greetings and odd links that phishing training relies on. What FBI loss data shows and which controls still hold.
PostgreSQL CVE-2026-6471 Turns Replication Into RCE
CVE-2026-6471 lets a PostgreSQL role with REPLICATION privilege load arbitrary server-visible code, turning a backup-style account into host RCE.
Securing AI and Defending Against It Are Two Different Problems
"AI security" names two unrelated problems with different owners, different controls and different budgets. Teams that conflate them buy the wrong thing.
Kubernetes 1.37 Makes Rootless Kubelet Beta
Kubernetes 1.37 promotes KubeletInUserNamespace to beta, letting node components run as a non-root host user and reducing breakout impact.
NetBackup Smartcard Authentication: What to Check
Why NetBackup smartcard login can fail while LDAP works, and how to check RBAC, UPN or CN mapping, the CA chain, OCSP and the Web UI service.
LockBit 5.0 Is Back in Europe’s Ransomware Top Five
LockBit 5.0 is back among Europe's five most active ransomware groups in 2026, and its return matters for virtualization, backup and recovery teams.
SharePoint CVE-2026-45659 Is Now a Ransomware Risk
CISA links SharePoint CVE-2026-45659 to ransomware. Which servers to check, why patching is not enough, and what backup teams should verify.
Shell Investigates Clop Claim of 89GB Data Theft
Shell has confirmed that it is investigating a potential security incident after the Clop group claimed it stole 89GB of data.
Trezor Breach Exposes 13,689 Customer Records
A breach at Trezor shipping provider ShipMonk exposed personal data for approximately 13,689 Trezor customers.
Veeam Security: CVSS 9.9 CVEs and Exposed Backup Servers
Veeam 12 and 13 CVSS 9.9 CVEs, domain joined backup servers, tricky patch paths and a VBR server exposed to the internet: what to check and fix.
SolarWinds 2026 Price Hike Leaves Customers Asking Why They Pay
A SolarWinds renewal jumped from $7,900 to $19,936 with a three-year push. Customers compare notes on pushback, support, Zabbix quotes and leaving.
SolarWinds Customers Are Furious About the Subscription Shift
SolarWinds seems to be dropping perpetual licenses. Customers share renewal hikes, negotiation tactics, HCO math and the alternatives they weigh.
The Homelab Debate Got Ugly Because IncusOS Hit a Nerve
An IncusOS test on Proxmox sparked a heated debate over security defaults, immutable updates, backups, and whether polished posts are now suspect.
Proxmox Mobile App: Official VE Companion on iOS and Android
Proxmox VE Companion is the official Proxmox mobile app for iOS and Android: what it does, trust questions, and how it compares with ProxMate and ProxMobo.
Proxmox Kernel Updates Are Exhausting, but Ignoring Them Feels Worse
Why Proxmox kernel updates keep coming, from container escape fixes to update fatigue, and how rollback, staged rollouts and Ansible make them bearable.
Proxmox Mail Gateway 9.1 Is a Boring Release in the Best Possible Way
Proxmox Mail Gateway 9.1 brings Debian 13.5, quarantine seen status, on-demand image loading and encrypted backups to Proxmox Backup Server.
He Got a Microsoft Data Center Contract Job at 21. What Comes Next
A 21-year-old landed a Microsoft contract data center technician role. Advice on tailored resumes, contract-to-hire odds, travel and building leverage.
The Data Center Panic Is Overblown, But the Bill Is Still Coming
Data center fears get loud, but power bills, grid debt, farmland, tax deals, and AI bubble risk are real questions communities need answered.
The Free Data Center Course Everyone Was Desperate to Find
Schneider Electric's free Data Center Certified Associate learning path: what it covers, how to find it, and why beginners were so glad to see it shared.
Proxmox Launched an iOS App and Homelab Owners Feel Weirdly Seen
Homelab reactions to the official Proxmox VE Companion iOS app: plain but useful cluster, log and console access, a low-key launch and security caution.
VMware VCF 9.1 Requirements Leave Smaller Labs Feeling Shut Out
VCF 9.1's Service Runtime reportedly needs 40 vCPU and 82GB RAM at its smallest size. Why home labs and smaller shops are rethinking the upgrade.
Why Leaving a Data Center Job Feels Impossible
Data center workers weigh good pay against work that doesn't fit: why most stay, some plan an exit, and a few leave and say they've never been happier.
Kubernetes User Namespaces Are Here and Might Break Things First
Kubernetes user namespaces reached general availability after six years. What they do for container security, and the storage and kernel issues users hit.
Kubernetes Gateway API vs Ingress: Why It Feels Hard
Why Kubernetes Gateway API frustrates operators moving off Ingress: extra controllers and CRDs, version management, and the case for staying outside core.
Kubernetes User Namespaces Reach GA After Six Years of Work
User namespaces are now GA in Kubernetes after six years. What they change for container security, and the file mapping and storage issues early users hit.
Your Digital Life Outlives You, and You're Probably Handling It Wrong
What happens to self-hosted notes and archives after you die: why most people land on encryption, where killswitch scripts fail, and splitting your data.
ProxMan on Android: Proxmox in Your Pocket and the Trust Question
ProxMan brings full Proxmox control to Android, from backups to VNC, and its closed source client splits admins over convenience versus trust.
That One Curl Command Could Own Your Server: Proxmox Setup Scripts
Why convenience scripts feel irresistible in Proxmox homelabs, and why experienced admins stay wary of blindly running curl-piped setup commands as root.
Kyverno CVE-2026-22039 Exposes Data Across Kubernetes Namespaces
A Kyverno flaw let namespaced policy users read any namespace through the cluster-admin service account. Fixed in 1.16.3 and 1.15.3; r/kubernetes reacts.
Proxmox 9 Upgrade: Worth It If Proxmox 8 Still Works?
Should a working Proxmox 8 homelab upgrade to Proxmox 9? Four community views: security support, easy upgrade tools, new features, or waiting for 9.1.
Wait, You Shouldn't Disable Root? Hardening a Proxmox Server
Why standard Linux hardening advice clashes with Proxmox: SSH keys, root login in clusters, disk encryption tradeoffs and three camps of Proxmox security.
What Happens When Your VMware vSphere License Expires
A March thread on expired vSphere 7 Essentials Plus support: frozen builds, patch access worries, costly extended support and why admins plan exits.
YubiHSM 2 and cert-manager for Hardware-Signed TLS on Kubernetes
I built a cert-manager external issuer that signs TLS certificates using a private key inside a YubiHSM 2.
MinIO Repo Archived: 2 Days Testing K8s S3 Alternatives
After the MinIO repo was archived, an r/kubernetes user compared Garage, SeaweedFS, RustFS, Ceph and Minimus, and commenters challenged the Ceph claims.
vCenter Expired Certificate Not Shown in Certificate Management
Why the data-encipherment cert alert appears in vCenter even when Certificate Management looks healthy.
Microsoft Is Forcing MFA on 365 Admins and Breaking Old Workflows
Microsoft's mandatory MFA for 365 admin accounts is breaking legacy scripts, service accounts and break-glass access, and forcing overdue cleanups.
kubernetes/ingress-nginx Ends March 2026: Your Migration Playbook
kubernetes/ingress-nginx reaches end of life in March 2026. How to audit your clusters and weigh migration options such as Traefik or Gateway API.
Lost ESXi Root Password: Reinstall and Keep Your VMs
Lost the root password on VMware ESXi 7 or 8? Why there is no supported reset, and how to reinstall while keeping your VMFS datastores and VMs.
Why Kubernetes 1.35 Feels Like a Security-First Release
Kubernetes 1.35 drops cgroup v1, hardens Kubelet certificate validation, adds constrained impersonation and turns on user namespaces by default.
Why Some Enterprises Still Ban Docker, and Workarounds
Why banks and other regulated enterprises ban Docker on developer machines, and how dev teams cope with Podman, shared clusters and older workflows.
VMware's AI Integration Is Here, but Do Sysadmins Actually Want It?
VMware launched Intelligent Assist, an AI chatbot in vDefend. Why sysadmins distrust AI in production and where VMware AI could still earn a place.
Docker in LXC on Proxmox: Risks, Tradeoffs, and Lessons
Proxmox homelabbers compare running Docker in LXC containers vs VMs: kernel panics, privileged vs unprivileged LXCs, backups, and hybrid setups.
Proxmox Helper Scripts: Handy Shortcut or Hidden Security Risk?
Why the Proxmox community is split on helper scripts: fast installs for busy homelabbers versus trust, security and learning concerns, plus a middle path.
When Your Firewall Won't Listen: Locking Down Proxmox Port 8006
Why blocking Proxmox port 8006 is harder than it looks: pveproxy binds every interface, rule order matters, and VLANs help isolate management.