Independent · Practical · For IT professionals
IT intelligence for people who keep systems running.
Security alerts, verified fixes, tutorials and tools for sysadmins & MSPs.
Practical guidesfor real-world problems
Independenteditorial content
Built for sysadminsand MSPs worldwide
Today’s Briefing
Key updates, tutorials and insights for sysadmins & MSPs.
Cisco ISE Zero-Day CVE-2026-76460 (CVSS 10.0) Exploited in Active Attacks
Cisco warns that CVE-2026-76460, a CVSS 10.0 authentication bypass in Identity Services Engine, is under active exploitation and can yield root command execution, with no workaround beyond access control lists.
Passkey-Themed Phishing Hits Microsoft 365 Accounts
Microsoft warns that threat actors tied to ShinyHunters and Helix extortion crews are using passkey-themed social engineering, not real passkey abuse, to compromise Microsoft 365 accounts and slowly exfiltrate cloud data.
Cisco FMC Flaws CVE-2026-20079 and CVE-2026-20316 Exploited by Ransomware, State Hackers
Cisco Talos says three threat clusters, a ransomware affiliate, a Russia-linked APT, and a credential-theft crew, exploited two Secure Firewall Management Center flaws to deploy web shells, Cyclops Blink malware, and Qilin ransomware.
How to Customize Intune Company Portal Branding
Learn how to create a custom Intune Company Portal branding policy: organization name, theme color, logos, brand image, support info, and app sources, plus how policy precedence works when a user gets more than one.
Solve a Problem
Step-by-step tutorials to fix real issues.
- Intune Company PortalEst. time: 10 minutesBeginner
How to Customize Intune Company Portal Branding
- Windows ServerEst. time: 20 minutes, plus a reboot window on each RDS hostIntermediate
How to Fix the September 2026 Windows Server RDS Bug With Microsoft's KIR Patch
- Microsoft IntuneEst. time: 20 minutesIntermediate
How to Set DNS Suffixes on Windows Devices with Microsoft Intune
- OneDriveEst. time: 30 minutesIntermediate
How to Remove the OneDrive Photos App from Managed Windows Devices
- Windows UpdateEst. time: 30 to 60 minutesIntermediate
How to Fix Windows Update Connectivity Issues Caused by Firewall, Proxy, and TLS Inspection
Sysadmin Toolbox
Useful tools for everyday tasks.
Subnet Calculator
IPv4 & IPv6 subnets — network, broadcast, host range, class and a subnet divider.
Open tool (opens in a new tab)Windows Log Analyzer
Parse Event Viewer CSV exports, filter and explain common Event IDs.
Open tool (opens in a new tab)Firewall Rule Builder
Generate iptables, nftables, UFW & Windows Firewall rules with presets.
Open tool (opens in a new tab)PowerShell Builder
Build common PowerShell commands visually — no syntax to memorize.
Open tool (opens in a new tab)Compare & Decide
In-depth comparisons to help you choose the right tools.
Arcane vs Portainer CE: Which Docker Manager Should You Run?
Arcane is a newer, lighter Docker and Swarm manager with free built-in RBAC and OIDC. Portainer CE covers Docker, Swarm, and Kubernetes but ships without role-based access control.
Pulumi vs Terraform: Which IaC Tool Should You Choose?
Pulumi and Terraform both automate cloud infrastructure with code, but they pull in different directions. Terraform asks you to learn HCL, a purpose-built configuration language with a huge provider ecosystem. Pulumi lets you write infrastructure in TypeScript, Python, Go, C# or Java. This comparison weighs language, licensing, state, secrets, testing, Kubernetes and developer experience.
Zabbix vs PRTG: Which Network Monitoring Tool Should You Choose?
Zabbix and PRTG both deliver network and infrastructure monitoring, but from opposite design philosophies. Zabbix is a free, open-source, highly customizable platform built for complex, large-scale environments. PRTG is a commercial, agentless, all-in-one tool favored by small-to-medium businesses for its ease of use and quick setup on Windows.
Deep Dives
Clear explanations for complex topics.
Intune Wipe for Windows: The Three Reset Options Explained
Intune's Wipe action gives Windows admins three different outcomes: a standard factory reset, a reset that keeps user files, and a protected wipe that survives power loss. Here is what each one actually does.
CVE-2026-62916 explained: authentication bypass in Microsoft Entra ID
CVE-2026-62916 is a CVSS 9.1 elevation-of-privilege vulnerability in Microsoft Entra ID, classified as CWE-288. This explainer breaks down what the CVE record actually says, what Microsoft has not published, and how to triage a cloud CVE you cannot patch.
Windows 11 Memory Integrity: Microsoft Enables HVCI by Default in October 2026
Starting in October 2026, Microsoft will use monthly Windows updates to turn on Memory Integrity (HVCI) by default on eligible Windows 11 PCs, closing a gap left by devices upgraded from Windows 10.