IT
Security, vulnerabilities, networks and systems: what happened, who it affects and what to do, without the alarmism.
8 posts
19 October 2026 · 5 min read
ITThree days to patch BIG-IP APM: you no longer set the schedule
CISA added the F5 BIG-IP APM flaw to its known-exploited catalogue on 22 September, with a 25 September deadline and mandatory evidence collection before patching. Three days. In 2023 it was twenty-one.
9 October 2026 · 5 min read
ITA 17,600-dollar bill and two support teams passing it back and forth: Azure credits didn't cover Claude
A Norwegian startup deployed Claude inside Microsoft Foundry assuming its Azure credits paid for it. They didn't: it went through Marketplace, on a separate billing pipeline. Now Microsoft points at Anthropic and Anthropic points back at Microsoft.
5 October 2026 · 5 min read
IT1,313 CVEs in a single Debian advisory: the number doesn't measure what you think
The Debian 13 kernel update ships with 1,313 CVE identifiers. That isn't 1,313 new holes: the way they're counted changed in 2024, and nobody has updated their audit reports.
28 September 2026 · 5 min read
ITMicrosoft deleted nonprofit data early and can't say what: retention was never your backup
Microsoft admits an error wiped data from nonprofits' expired Microsoft 365 Business Premium subscriptions before the retention period ended, that it can't be recovered, and that it can't list what disappeared. The real story isn't the bug: it's that almost nobody keeps an inventory of what they store in the cloud.
16 September 2026 · 5 min read
ITAWS admits some data is not coming back: multi-AZ was never a recovery plan
AWS has confirmed it cannot restore data held only in its Bahrain Region, or in one Availability Zone in the UAE. This isn't a long outage: the data is gone. What that forces you to review in your architecture, and what it doesn't.
14 September 2026 · 5 min read
ITSeptember's patches break RDP, USB audio and pasting in Excel — the scary one is the third
Microsoft has confirmed that its September security updates knock out Remote Desktop on several Windows versions, silence older USB audio devices and make pasting in Excel fail without a word. The dangerous failure isn't the noisy one: it's the one that fails in silence.
7 September 2026 · 5 min read
ITLeap seconds are going away: what changes in your code on 20 May 2027
In October there is a vote to make UTC continuous from May 2027 and allow up to an hour of divergence from the Earth's rotation. Good news — and here is what to check before you take it for granted.
7 September 2026 · 5 min read
IT576 GB of HBM under your desk: the Threadripper Halo, and why almost nobody needs it
AMD unveiled at IFA 2026 a workstation with up to four Instinct MI350P cards and 576 GB of HBM3e memory for running huge models locally. Here's which figure actually matters, what I'd do differently from today, and why the headline is being read worse than it deserves.