X XFediYour place in the Fediverse
XFEDI

#sysadmin

ActivityPub

Public posts with this hashtag.

CrowdSec@[email protected]

PHP2Shell (CVE-2026-109618/109619): two RCEs in PHP itself. Unauthenticated attackers can run code before any app code runs.

Patched: 8.5.12, 8.4.27, 8.3.36, 8.2.35. PHP 8.1 and older: no fix from the PHP project, ask your distro.

Can't update today? Free, tentative CrowdSec WAF virtual patches:

CVE-2026-109618: https://app.crowdsec.net/hub/author/crowdsecurity/waf-rules/vpatch-CVE-2026-109618
CVE-2026-109619: https://app.crowdsec.net/hub/author/crowdsecurity/waf-rules/vpatch-CVE-2026-109619

A stopgap, not a fix.

#PHP #infosec #CVE #sysadmin

Open video ↗
app.crowdsec.netPHP - RCE WAF Rule by crowdsecurity | CrowdSec HubTentative vpatch for CVE-2026-109618 : block requests crafted to exhaust PHP memory during input parsing.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
AndThisIsMrsPeacock 🏳‍🌈@[email protected]
Vibe Coding Rant Show content

Something that melts my brain on a daily basis is that due to reasons, about 80% of the 'code' my team writes is #PowerShell scripts (don't ask). #VSCode is actually a good environment for this, because it has some pretty decent built in best practice analysis, like it will alert you if you have an unreferenced variable, an uncalled function, deprecated syntax, excess loops, &c. Very rookie code hygiene stuff, but useful.

The quality of content my team has been making with VSCode has been pretty good.

But now I have a couple of guys that are using #Copilot to make scripts.

So I take the code they had Copilot "write" and open it in the normal-ass VSCode ISE to proofread it.

And the goddamn thing lights up like a Christmas tree, because the Microsoft product that "wrote" the code did not follow any of... the Microsoft product that you use to edit the code's best practices.

I hate it here.

#IT #SysAdmin #DatacenterLife

↩ Reply ♡ 0 · ↻ 0 ↗ Original
Patch or Pass@[email protected]

Shout-out to Misconfig Monday, a free weekly newsletter for small IT teams, sysadmins and MSPs with no SOC. Each issue covers the CISA KEV flaws to patch first, plus one misconfiguration to fix.

They recommend Patch or Pass, and we recommend them right back. If you like our Patch now / Batch / Watch calls for homelab gear, you'll like their work-side version.

https://misconfigmonday.beehiiv.com/

#infosec #sysadmin #PatchManagement #CISA #KEV

Misconfig MondayMisconfig Monday: Weekly Patch Priorities for Small IT TeamsExploited CISA KEV vulnerabilities to patch first, plus one security misconfiguration to fix. Free, weekly, for IT teams with no SOC.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Daniel Brendel@[email protected]
↳ In reply to a post

You know things get serious when even the german Tagesschau publishes news on the subject:

https://www.tagesschau.de/wirtschaft/technologie/it-sicherheit-php-luecke-100.html

Meanwhile, the PHP Group published the fixes:
https://github.com/php/php-src/releases/tag/php-8.5.12

#PHP #PHP2Shell #InfoSec #SysAdmin #OpenSource #SelfHosted

tagesschau.deProgrammiersprache PHP: Sicherheitslücke bedroht weltweit WebseitenZahlreiche Webseiten und Onlinedienste weltweit sind derzeit in Gefahr: Grund ist eine Sicherheitslücke in der weitverbreiteten Programmiersprache PHP. Das Gefahrenpotenzial ist demnach extrem hoch.
↩ Reply ♡ 0 · ↻ 0 ↗ Original
Solomon Neas@[email protected]

Never V2V a domain controller. Converting a DC's disk risks USN rollback, and the only recovery from that is rebuilding the domain.

What I did instead when moving off Hyper-V was a leapfrog:
1. Move all 5 FSMO roles to DC2
2. Delete DC1, build fresh on Proxmox, promote, let AD replicate
3. Move the roles to the new DC1
4. Repeat for DC2

Run repadmin /showrepl after every step. Both DCs moved with no downtime.

The writeup covers the rest: Linux V2V, DFS ripped out for GPO drive maps, UniFi moved into an LXC, SCCM swapped for FOG, and the Wazuh/Cortex/TheHive/MISP stack. 4 standalone hosts plus a 6-node cluster. Hypervisor licensing: $0.

https://solomonneas.dev/blog/hyperv-to-proxmox-migration-guide

#HomeLab #Proxmox #SysAdmin

Solomon NeasI Migrated Our Entire Infrastructure from Hyper-V to Proxmox. Here's Everything I Learned.Domain controllers, file servers, network monitoring, imaging, WiFi controllers. All of it moved from Microsoft to open source. No downtime. No data loss. Here's the complete playbook.
↩ Reply ♡ 0 · ↻ 0 ↗ Original