FortiGate IPAM vs DHCP: Differences, Overlap, and What to Check Before You Turn IPAM On
Manny FernandezFortiGate IPAM vs DHCP: Differences, Overlap, and What to Check Before You Turn IPAM On No fluff. Just the config...
Read More
Outlook CVE-2026-124194: Patch the Zero-Day That Leaks NTLM Hashes
Manny FernandezNo fluff. Just the config that works. Executive Summary Outlook CVE-2026-124194 is the one Microsoft flaw from the November 10,...
Read More
WHOIS Protocol: History, Limitations, and What Replaced It
Manny FernandezNo fluff. Just the config that works. Executive Summary Objective: Explain where the WHOIS protocol came from, why it no...
Read More
EJBCA Internal CA: Deploy a Private PKI for Your Local Servers with Docker
Manny FernandezInfoSecMonkey | No fluff. Just the config that works. Executive Summary: Why an EJBCA Internal CA Every lab and small...
Read More
Windows Server Audit Policy: Advanced Auditing, Command Lines, SACLs and Log Sizing
Manny FernandezInfoSecMonkey Practitioner Guide Advanced Audit Policy, command line capture, SACLs, and log sizing, start to finish Executive Summary Objective: build...
Read More
CVE-2026-98432 Mitigation on FortiGate: Blocking the Linux Kernel TCP Use-After-Free (FG-IR-26-188)
Manny FernandezFortiGuard PSIRT · FG-IR-26-188 · CVE-2026-98432 No fluff. Just the config that works. Executive Summary Objective: put working CVE-2026-98432 mitigation...
Read More
Fortinet PSIRT Countermeasures: Pre-Auth Bugs Trusted Hosts Won’t Stop
Manny FernandezNo fluff. Just the config that works. Fortinet's November 10, 2026 PSIRT release dropped 88 advisories in one day. Most...
Read More
FortiGate IKEv2 Certificate Pinning: Machine Certificate Plus EAP-MSCHAPv2 Remote Access VPN
Manny FernandezPin a device certificate to your IKEv2 dial-up tunnel, then make the user prove who they are with EAP-MSCHAPv2. PKI...
Read More
Malware in 2026: A Practitioner’s Field Guide to the Types You Will Actually See
Manny FernandezInfostealers, ransomware, loaders, RATs, worms, botnets, wipers, EDR killers, mobile NFC relay, and the first LLM-in-the-loop families. What each one...
Read More
Meraki CVE-2026-76463: Find and Patch Every Affected Device
Manny FernandezCisco Meraki Security Hardening Release, October 2026: the access control bundle, what adjacent means for your network, and how to...
Read More
Chrome CVE-2026-11660: New Tab Page Sandbox Escape, Verify and Enforce the Patch
Manny FernandezNO FLUFF. JUST THE CONFIG THAT WORKS. Chrome CVE-2026-11660 is a sandbox escape in the New Tab Page, rated 8.3...
Read More
eMudhra Certificate Compromise: What Broke and How to Clean Up Your Trust Stores
Manny FernandezINFOSECMONKEY | NO FLUFF. JUST THE CONFIG THAT WORKS. eMudhra Certificate Compromise: What Broke and How to Clean Up Your...
Read More
CVE-2026-19868: SonicWall SAML MFA Bypass on SSLVPN, Patch and Hunt Guide
Manny FernandezCVE-2026-19868: SonicWall SAML MFA Bypass on SSLVPN, Patch and Hunt Guide InfoSecMonkey | No fluff. Just the config that works....
Read More
nmap Companion Tools: The Command-Line Ecosystem That Reads Your Scans
Manny Fernandeznmap Companion Tools: The Command-Line Ecosystem That Reads Your Scans No fluff. Just the config that works. Executive Summary nmap...
Read More
OpenSSH *sshole (CVE-2026-123158): Find, Patch and Lock Down Alpine sshd
Manny FernandezNo fluff. Just the config that works. Objective: The OpenSSH *sshole bug (CVE-2026-123158) lets anyone who can reach port 22...
Read More
Spanning Tree Protocol Explained: STP vs RSTP vs MSTP (with FortiSwitch Config)
Manny FernandezSpanning Tree Protocol Explained: STP vs RSTP vs MSTP (with FortiSwitch Config) No fluff. Just the config that works. Executive...
Read More
FortiClient ZTNA Connection Refused on macOS: When pf Answers for the Server
Manny FernandezNo fluff. Just the config that works. Executive Summary SecureCRT said Connection refused. Terminal ssh to the exact same host...
Read More
FortiGate Incomplete Certificate Chain: Fixing the Missing GoDaddy Intermediate
Manny FernandezExecutive Summary A routine external scan of a customer's public IPs came back with one finding: an incomplete FortiGate certificate...
Read More
FortiGate Threat Feed Stuck on Not Start? Check for a 301 Redirect
Manny FernandezNo fluff. Just the config that works. FortiGate can pull IP, domain, URL and malware hash lists from outside servers...
Read More
CVE-2026-97631: EDK2 PXE ICMP Overflow Turns Network Boot into Pre-Boot RCE
Manny FernandezCVE-2026-97631: EDK2 PXE ICMP Overflow Turns Network Boot into Pre-Boot RCE InfoSecMonkey | October 29, 2026 | No fluff. Just...
Read More
