From the field
The XOtavo Blog
Plain-language notes on AI visibility, technology owned from the owner's side of the table, security, and the infrastructure behind the businesses we serve.
WordPress Sites: Make Sure the 7.1.4 Security Update Installed
Attackers are already probing a WordPress flaw that can let them take over a site while it updates. Here is how to confirm your site is on 7.1.4 and what to look for.
Binance Reports a $6.3 Billion Security Incident: What Happened
About $6.3 billion left Binance hot wallets on October 29. Here is what Binance and blockchain investigators have reported so far, and the employee-device lesson for any business.
Ivanti Connect Secure VPN Owners: Install the October 29 Update Now
Attackers are chaining three Ivanti Connect Secure VPN flaws to take over the appliance and steal network passwords. The final fixes came out October 29. Here is what to check.
Ransomware Is Targeting Synology NAS Devices: Update DSM Now
Synology says attackers are encrypting NAS devices that are missing DSM updates. If your files or backups live on a Synology, here is what to check.
Cisco Firewall VPN Flaw Is Being Used to Knock Firewalls Offline: What to Check
Attackers are using a Cisco ASA and FTD VPN flaw to force firewalls to restart, cutting off the office and remote users. Fixes are out. Here is what to check.
PHP2Shell Plus a Linux Flaw Is Now Taking Over Firewalls: What to Check
Dream Research named Palo Alto Networks PAN-OS in the PHP2Shell + Fragnesia campaign against internet-facing management interfaces. Here is what to check.
Node2Shell: What Business Owners Should Do About the Brotli Flaw
A critical flaw in a common compression library is now being exploited. Here is who is at risk, including some Palo Alto firewalls, and what to update.
Fortinet Firewall Owners: Install the October Security Updates Now
Fortinet released critical fixes for FortiGate firewalls and related products, with details coming November 10. Here is what to update and how to lower your risk until you do.
Palo Alto GlobalProtect VPN Flaw Now Used by Ransomware Groups: What to Check
Ransomware groups are using a Palo Alto GlobalProtect VPN flaw that can skip passwords and MFA. Fixes have been out since May. Here is what to check.
Nextcloud Users: Update the Built-in Office App Now (CVE-2026-110447)
A flaw in Nextcloud's built-in office app is under active attack. If you self-host Nextcloud, here is how to check and fix it.
Nvidia Vera Rubin: A Cable-Free, Warm-Water-Cooled AI Rack
Nvidia's new AI rack drops internal cables and fans and cools with 113°F water. How it works, with a diagram.
ConnectWise Cloud Backup (SkyKick) Incident: What Microsoft 365 Customers Should Check
Stolen credentials for a Microsoft 365 backup app were used to reach customer tenants. If you use ConnectWise Cloud Backup or SkyKick, here is what to check.
SafePay Ransomware: What the New FBI and CISA Warning Means for Your Business
A new FBI and CISA warning says SafePay ransomware gets in through VPNs, firewalls and backup servers, then wipes backups. Here is what to check.
PHP2Shell: What Business Owners Should Do About the New PHP Flaw
Two critical PHP flaws let attackers run code on a web server without a password. Here is who is at risk and what to update.
AI Is Becoming Part of Your Business Network. Is Your Infrastructure Ready?
AI arrived inside tools you already pay for. The network, security, and identity behind it decide whether it creates value or risk.
Why AI May Send Customers to Everyone but You
Your website looks perfect. Here is why the customers using AI to find you may never see it.
Your Cable Plant Will Outlive the Vendor Who Installs It
You price it once, it lives in your walls longer than the walls do, and the warranty may outlive the company that signed it.