Server and Virtualisation

Server Administration, Windows Server administration, Nginx, Apache, MySQL, PostgreSQL, MariaDB, MongoDB, VMware, vCenter, ESXi, Proxmox VE, Hyper-V, KVM, QEMU, libvirt, container, server monitoring, server security, SSH, remote access, FTP, SFTP, server performance, server hardening, iSCSI, NFS, SMB, CIFS, DNS server, DHCP server, web server, bare metal, rack server, IPMI, BIOS, RAID

83 stories

Hacking and Exploits

Tailscale’s “Tailworm”: 11 SSH Flaws That Can Lead to Root Escalation

Tailscale is racing to patch a cluster of serious vulnerabilities discovered in its software after security researchers found flaws that could let attackers steal credentials, crash servers, and even gain root privileges on targeted systems. The issues, disclosed by Cyberdione Labs and collectively dubbed "Tailworm," affect released builds of Tailscale and the self-hosted headscale control server and have prompted urgent mitigation guidance from Tailscale while fixes are prepared. What was…

Saugata DattaOct 27, 20265 min read8

Linux

Windows 11 KB5127936: Microsoft removes a hidden app-launch slowdown

Microsoft has quietly been squeezing more speed out of Windows 11, and one of the latest tweaks targets a small but perceptible friction point that slows app launches. In the newest Release Preview update, KB5127936, Windows will stop spawning a temporary process when you open a link or launch Edge from the Taskbar or Start menu if the browser is already running. That unnecessary detour lengthens the launch path; removing…

Saugata DattaOct 26, 20263 min read18

Automation

Stadia RAT: StealC’s Comeback Brings Hidden Desktop Control and Browser Theft to Windows PCs

The StealC operation that law enforcement disrupted this summer has not disappeared — it has evolved. Researchers recently identified a rebuilt strain, marketed as Stadia, that fuses credential theft with a Remote Access Trojan (RAT) feature set designed to give operators secret, persistent control over infected Windows machines. While the takedown seized infrastructure, surviving code and a ready customer base appear to have enabled the seller to rebrand and relaunch…

Saugata DattaOct 24, 20264 min read80

Cloud Computing

Windows Server 2016: Why January 2027 Is a Hard Deadline for Administrators

Microsoft’s long-term support clock for Windows Server 2016 is winding down: the January 2027 security update will be the last one published for this OS, and after January 12, 2027, systems still running Windows Server 2016 will no longer receive monthly security updates. That simple sentence changes the risk profile for any environment still depending on 2016-era servers. If your estate includes domain controllers, application servers, or infrastructure appliances on…

Saugata DattaOct 24, 20264 min read85

Cybersecurity

Cisco Expressway Flaw Lets Remote Attackers Run Commands as Root

Cisco has released fixes for a critical vulnerability in its Expressway product line that could allow remote attackers to execute operating-system commands with root privileges on affected devices. Tracked as CVE-2026-76466 and assigned a CVSS score of 9.8, the issue is specific to clustered deployments of Cisco Expressway Core (Expressway‑C) and Cisco Expressway Edge (Expressway‑E). Cisco published its advisory on October 21, 2026, and the company credited Stefan Aleksic of…

Saugata DattaOct 23, 20264 min read101

Cybersecurity

Vercel Confirms KVM Zero-Day VM Escape, Awards Researcher $50,000

Vercel has publicly acknowledged a reported KVM zero-day that a security researcher says enables a full guest-to-host virtual machine escape, and the company has granted the finder its top bounty of $50,000. The disclosure raised immediate concern because Vercel uses isolated microVMs as the primary sandbox boundary for untrusted workloads and AI agents, and a successful escape to host root undermines that separation. At the time of announcement, Vercel and…

Saugata DattaOct 4, 20263 min read159

Cloud Computing

Critical Dell Container Storage Flaws Expose Admin Controls — Immediate Upgrades Required

Dell’s Container Storage Modules (CSM) were found to contain multiple critical vulnerabilities that can allow unauthenticated remote attackers to gain full administrative control of affected storage environments. The most severe issues — two CVSS 10.0 flaws — permit attackers to bypass authentication and escalate to administrator privileges, while other high-severity flaws enable privilege escalation inside Kubernetes clusters or token forgery. Dell has released advisory DSA-2026-448 and fixed the issues in…

Saugata DattaOct 3, 20264 min read213

Cybersecurity

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

A newly disclosed critical flaw in VMware vCenter (CVE-2026-59310) has moved quickly from patch release to active exploitation, according to investigative reporting and telemetry from security firms. The vulnerability—a directory traversal bug that allows an actor with network access to execute arbitrary code—was patched by Broadcom late last month, and forensic evidence collected by QUIRSO indicates attackers were able to chain that weakness into persistent remote access on production appliances…

Saugata DattaAug 12, 20264 min read243

Cloud Computing

Microsoft Extends Windows 10 Extended Security Updates Through October 2027

Microsoft has quietly extended its consumer Extended Security Updates (ESU) program for Windows 10, pushing the cutoff for critical security patches out another year to October 12, 2027. The move gives millions of users who have not yet migrated to Windows 11 additional time to receive important and critical security fixes, while Microsoft continues to encourage upgrades to the newer OS. For those already enrolled in the consumer ESU program,…

Saugata DattaJun 26, 20263 min read209

Automation

The Credential-Free Watchdog: Mastering Event-Driven App Automation

We have all been there. You are an automation lover. You have built a masterpiece — a Scheduled Task, perfectly configured, credentials entered, running like clockwork. You walk away like a hero. Then Monday morning hits. Your account is locked. Your coffee tastes like failure. I once left a mapped network drive in an SOE test build and completely forgot about it. Windows did not forget. Every night it faithfully…

Saugata DattaMay 7, 202612 min read252

PowerShell

Ditching PsExec – Running Interactive SYSTEM Shells Natively in PowerShell

If you’ve spent any time in Windows System Administration over the last decade, I can almost guarantee you’ve reached for PsExec at least once. Originally from Sysinternals and now officially part of Microsoft, PsExec is one of those deceptively simple tools that has quietly saved thousands of IT professionals from hours of sheer agony. A single executable, zero installation, no messy dependencies. You drop it on a machine, and it…

Saugata DattaMay 2, 202617 min read390

Artificial Intelligence

Meta inks deal for solar power at night, beamed from space

The race to keep massive AI workloads powered around the clock has led Meta to sign a capacity reservation agreement with Overview Energy, a startup developing spacecraft that collect solar energy in space and convert it to near-infrared light beamed at large terrestrial solar farms. The deal — for up to 1 gigawatt of capacity — is a notable early commercial commitment for a technology that, if it scales, could…

Saugata DattaApr 27, 20263 min read307

Free Tools: IP, DNS, SSL