Security
Breaches, attacks and actively exploited vulnerabilities, and the fixes.
Latest analysis
N-able N-central Zero-Day Exploited Hours After Exploit Code Published, Even on Patched Servers
Attackers began exploiting a new N-able N-central flaw, 4EverAble2Shell, within hours of exploit code appearing on Thursday 12 November, and researchers say most hit servers had the latest hotfix. What is confirmed, what is not, and six things MSPs and IT teams should do now.
Read-only scripts
- Windows devices with no BitLocker recovery key in Entra IDMicrosoft Entra ID, Windows
- Intune devices that haven't synced in N daysMicrosoft Intune
- Mailboxes forwarding to external addressesExchange Online
- BitLocker status of every volume on this PCWindows
Upcoming deadlines
- Intune moves to macOS 15 and laterQ4 2026
- SAP SuccessFactors provisioning: move from basic auth to workload identityNovember 2026
- Intune November release: JIT registration reminder at APNs renewal and automatic JIT for eligible tenantsNovember 2026
Explore KBY
The KBY Brief
A short email about twice a week with new runbooks, configuration traps and fixes from KBY Technologies.
SubscribeProduction engineering in News Security
Technical reports for engineers designing and operating news security systems. Explore implementation patterns, diagnostic methods, failure modes and the trade-offs that determine whether a design remains dependable in production.
Enterprise News Security
Understand the components, boundaries and dependencies that shape dependable news security designs.
Implementation & Automation
Apply changes through repeatable automation with clear validation, monitoring and recovery controls.
Failure Analysis
Recognise common failure signatures and choose diagnostic evidence that narrows the problem quickly.