Security
Insights, tutorials and best practices from the world of Cloud, DevOps and Open Source
Metabase emergency patch: SQL injection rated CVSS 10.0 is being actively exploited
Metabase closed two critical vulnerabilities on 6 August 2026. The more severe one carries CVSS 10.0 and is, according to the vendor, being actively exploited:...
#SQLInjection#CVSS10#SelfHostingRead more
Zoom CVE-2026-53412: critical account takeover and sovereign alternatives
On 14 July 2026, Zoom disclosed a vulnerability rated critical in its Windows client: CVE-2026-53412 allows an unauthenticated attacker to take over an account through...
#CVE#ITSecurity#OpenSourceRead more
pedit COW & DirtyClone: Two Critical Linux Kernel Flaws in 2026
Within a few weeks in 2026, two Linux kernel local privilege-escalation flaws were published that work the same way: CVE-2026-46331 (nicknamed "pedit COW") and CVE-2026-43503...
#CVE#PatchManagement#ITSecurityRead more
Self-Host RustDesk 2026: the Sovereign TeamViewer Alternative Done Right
RustDesk has made unflattering headlines repeatedly in the first half of 2026: a botnet abusing the public server, a forced login on the demo server,...
#RemoteSupport#SelfHosted#GDPRRead more
NIS2 & Remote Maintenance: What the BSIG Now Requires (as of October 2026)
NIS2 is no longer an announcement, it is law in force: Germany's NIS2 Implementation and Cybersecurity Strengthening Act (NIS2UmsuCG) has been in force since 6...
#RemoteMaintenance#ITSecurity#OTSecurityRead more
FortiGate SSL-VPN Risk in 2026: Why Internet-Exposed VPN Appliances Became a Liability and ZTNA Is the Answer
On 27 January 2026, the US agency CISA added an actively exploited FortiOS flaw to its Known Exploited Vulnerabilities (KEV) catalog and gave US federal...
#SSLVPN#ZTNA#NetBirdRead more
Free intro call
Let's talk about your project - no obligation
- Straight with Timo and Robin - no sales team, no pitch
- A professional assessment of your situation
- Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
Let's Talk About Your Idea
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.