Tag

#hardening

2 posts tagged #hardening.

Analysis · May 20, 2026 · Colten Anderson

The Linux firewall bug your users can reach because you gave them a private root

CVE-2024-1086 is an nf_tables use-after-free that hands a local user root. The reason an unprivileged user can touch the kernel's packet-filtering engine at all is unprivileged user namespaces, and turning those off defuses a whole class of these bugs at once.
Field Note · May 15, 2026 · Colten Anderson

Nine PowerShell checks before you trust a Windows host

A short, native-PowerShell audit a Windows admin can run on any host in about ten minutes. The bad answers are unambiguous and the fixes are cheap.