EJBCA Internal CA: Deploy a Private PKI for Your Local Servers with Docker
Manny FernandezInfoSecMonkey | No fluff. Just the config that works. Executive Summary: Why an EJBCA Internal CA Every lab and small...
Read More
Windows Server Audit Policy: Advanced Auditing, Command Lines, SACLs and Log Sizing
Manny FernandezInfoSecMonkey Practitioner Guide Advanced Audit Policy, command line capture, SACLs, and log sizing, start to finish Executive Summary Objective: build...
Read More
CVE-2026-98432 Mitigation on FortiGate: Blocking the Linux Kernel TCP Use-After-Free (FG-IR-26-188)
Manny FernandezFortiGuard PSIRT · FG-IR-26-188 · CVE-2026-98432 No fluff. Just the config that works. Executive Summary Objective: put working CVE-2026-98432 mitigation...
Read More
Fortinet PSIRT Countermeasures: Pre-Auth Bugs Trusted Hosts Won’t Stop
Manny FernandezNo fluff. Just the config that works. Fortinet's November 10, 2026 PSIRT release dropped 88 advisories in one day. Most...
Read More
FortiGate IKEv2 Certificate Pinning: Machine Certificate Plus EAP-MSCHAPv2 Remote Access VPN
Manny FernandezPin a device certificate to your IKEv2 dial-up tunnel, then make the user prove who they are with EAP-MSCHAPv2. PKI...
Read More
Malware in 2026: A Practitioner’s Field Guide to the Types You Will Actually See
Manny FernandezInfostealers, ransomware, loaders, RATs, worms, botnets, wipers, EDR killers, mobile NFC relay, and the first LLM-in-the-loop families. What each one...
Read More
Meraki CVE-2026-76463: Find and Patch Every Affected Device
Manny FernandezCisco Meraki Security Hardening Release, October 2026: the access control bundle, what adjacent means for your network, and how to...
Read More
Chrome CVE-2026-11660: New Tab Page Sandbox Escape, Verify and Enforce the Patch
Manny FernandezNO FLUFF. JUST THE CONFIG THAT WORKS. Chrome CVE-2026-11660 is a sandbox escape in the New Tab Page, rated 8.3...
Read More
eMudhra Certificate Compromise: What Broke and How to Clean Up Your Trust Stores
Manny FernandezINFOSECMONKEY | NO FLUFF. JUST THE CONFIG THAT WORKS. eMudhra Certificate Compromise: What Broke and How to Clean Up Your...
Read More
CVE-2026-19868: SonicWall SAML MFA Bypass on SSLVPN, Patch and Hunt Guide
Manny FernandezCVE-2026-19868: SonicWall SAML MFA Bypass on SSLVPN, Patch and Hunt Guide InfoSecMonkey | No fluff. Just the config that works....
Read More
nmap Companion Tools: The Command-Line Ecosystem That Reads Your Scans
Manny Fernandeznmap Companion Tools: The Command-Line Ecosystem That Reads Your Scans No fluff. Just the config that works. Executive Summary nmap...
Read More
OpenSSH *sshole (CVE-2026-123158): Find, Patch and Lock Down Alpine sshd
Manny FernandezNo fluff. Just the config that works. Objective: The OpenSSH *sshole bug (CVE-2026-123158) lets anyone who can reach port 22...
Read More
Spanning Tree Protocol Explained: STP vs RSTP vs MSTP (with FortiSwitch Config)
Manny FernandezSpanning Tree Protocol Explained: STP vs RSTP vs MSTP (with FortiSwitch Config) No fluff. Just the config that works. Executive...
Read More
FortiClient ZTNA Connection Refused on macOS: When pf Answers for the Server
Manny FernandezNo fluff. Just the config that works. Executive Summary SecureCRT said Connection refused. Terminal ssh to the exact same host...
Read More
FortiGate Incomplete Certificate Chain: Fixing the Missing GoDaddy Intermediate
Manny FernandezExecutive Summary A routine external scan of a customer's public IPs came back with one finding: an incomplete FortiGate certificate...
Read More
FortiGate Threat Feed Stuck on Not Start? Check for a 301 Redirect
Manny FernandezNo fluff. Just the config that works. FortiGate can pull IP, domain, URL and malware hash lists from outside servers...
Read More
CVE-2026-97631: EDK2 PXE ICMP Overflow Turns Network Boot into Pre-Boot RCE
Manny FernandezCVE-2026-97631: EDK2 PXE ICMP Overflow Turns Network Boot into Pre-Boot RCE InfoSecMonkey | October 29, 2026 | No fluff. Just...
Read More
Sales Forecasting Metrics Explained: A Sales Engineer’s Field Guide
Manny FernandezClosed, Commit, Best Case, Pipeline, and the Landing number, decoded for the SE who has to defend the technical win...
Read More
Microsoft Paint CVE-2026-83844: The RCE Fix Windows Update Will Never Install
Manny FernandezNo fluff. Just the config that works. Executive Summary Paint CVE-2026-83844 is a remote code execution bug in the Windows...
Read More
SonicWall GMS Vulnerability CVE-2026-109593: Unpatched, End of Life, and What to Do Now
Manny FernandezINFOSECMONKEY | CVE BRIEF | NO FLUFF. JUST THE CONFIG THAT WORKS. Executive Summary On November 3, 2026, SonicWall published...
Read More
