PHP Vulnerability, Oh My!

Posted in Security

Tonight I was working on upgrading a few things across my server infrastructure and ran into an issue that required dropping everything to patch immediately. A massive critical vulnerability dropped for the core PHP engine (specifically CVE-2026-109618 and CVE-2026-109619), which allows unauthenticated remote code execution (RCE). If you host your own VPS or dedicated boxes….

Adding Domain/AzureAD Security Groups to AzureAD Joined Endpoints

We’re in the middle of a desktop/laptop migration thanks (in-part) to the Covid pandemic and the shift to work-from-anywhere. As part of that, we have a need to include the domain user (we’re still in a hybrid deployment) in the local security group Network Configuration Operators to ensure they can manage the VPN tunnel. What….

SFTP User Lock Down in AWS Transfer Service

Posted in AWS, SecurityTagged , , , , ,

First things first.  I know SFTP topics aren’t sexy.  I can hear you right now, SFTP is an archaic protocol only used by people with archaic systems.  And generally speaking, you’re probably not wrong.  However, many of us still work in those environments and are making progress towards cloud services one piece at a time…..