Ticker

1. October 2026
2. Oct 16 Exchange Outages After the October 2026 Windows Server Updates: MapiExceptionMdbOffline (ec=1142) After the Windows Server updates of October 13, 2026, Exchange servers report MapiExceptionMdbOffline (ec=1142) after around 24 hours: OWA fails, queues grow, and DAG copies stop replicating. Microsoft confirms the link to the Windows updates, but a fix is not yet available. Symptoms, affected KBs, verification commands, and recommended steps. Exchange updates (SU & CU) · 7 min read Warning
3. Oct 15 CVE-2026-76519: Cisco Secure Email Gateway Path Traversal Is Being Exploited - Update and Check for Compromise A crafted email attachment is all it takes: Through a path traversal vulnerability in the AMP File Reputation feature, attackers can write arbitrary files to Cisco Secure Email Gateway and execute commands with root privileges (CVE-2026-76519, CVSS 9.8). The vulnerability is being exploited. Updating the Content Scanner Tools or AsyncOS and checking for compromise are required. Vulnerabilities · 7 min read
4. Oct 14 CVE-2026-96951: Windows Shell Mark of the Web Bypass Is Being Exploited—Install the October Update On October 13, 2026, Microsoft fixed an already exploited Windows Shell vulnerability (CVE-2026-96951, CVSS 8.8). Crafted files delivered by email or chat can bypass Mark of the Web protection. CISA lists the vulnerability in its KEV catalog; only the cumulative October update resolves it. Vulnerabilities · 6 min read
5. October 2026 Exchange security updates: six vulnerabilities, final update for Exchange 2016 and 2019 The October SU closes six vulnerabilities, including a critical remote code execution issue through a crafted email, and fixes the .ics issue and the WordBreaker deadlock. It is the final update for Exchange 2016 and 2019, including under the ESU program. Exchange updates (SU & CU) · 7 min read
6. Oct 13 New Exchange builds: Oct26SU SE RTM Oct26SU (15.2.2562.56) · 2019 CU15 Oct26SU (15.2.1748.55) · 2019 CU14 Oct26SU (15.2.1544.50) · 2016 CU23 Oct26SU (15.1.2507.77) 4 builds Exchange build
7. Oct 7 Exchange Security Update September 2026 v2: Early Fix for CVE-2026-96940 On October 2, 2026, Microsoft released version 2 of the September SUs for Exchange SE, 2019, and 2016. It also addresses CVE-2026-96940, an elevation-of-privilege vulnerability with a CVSS score of 8.8 and an “Exploitation More Likely” assessment. Microsoft recommends installing v2 as soon as possible, including on servers running the first September SU. Exchange updates (SU & CU) · 5 min read
8. September 2026 Exchange Security Updates: Nine Vulnerabilities, Wrapper Issue Fixed, v2 Released The September SU closes nine vulnerabilities in Exchange SE and 2019 (eight in Exchange 2016), including a spoofing vulnerability with CVSS 9.3, and fixes the wrapper issue in hybrid environments. A v2 with an additional CVE followed on October 2; there are also three known issues with workarounds and a SettingOverride that should now be removed. Exchange updates (SU & CU) · 11 min read
9. Oct 6 Connecting digitalSTROM with Home Assistant: local integration and automations A local Home Assistant integration for the digitalSTROM server, plus motion-activated lighting, shower mode, music with 4× tapping, and automatic leaving via FRITZ!Box. Including the issues encountered in practice. Home Assistant and IoT · 13 min read
10. CVE-2026-73570: Zimbra Command Injection via SNMP Is Being Exploited—Update to 10.1.20 and Check for Compromise A crafted email is all it takes: On Zimbra servers with the zimbra-snmp package and SNMP notifications enabled, attackers can execute commands as the zimbra user without authentication (CVE-2026-73570, CVSS 8.9). The vulnerability is being exploited and was fixed in 10.1.20. Update, apply the workaround until then, and check for web shells and persistence. Vulnerabilities · 8 min read
11. CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Is Being Exploited—Update and Check for Compromise A specially crafted email is all it takes: via an SQL injection in AsyncOS, attackers can execute commands with root privileges on Cisco Secure Email Gateway (CVE-2026-76461, CVSS 9.8). The vulnerability is being exploited, and no workaround is available. Updating to a fixed version and checking for compromise are required. Vulnerabilities · 7 min read
12. Renewing a Totemomail Certificate: 4096-Bit Key, PKCS#12 Import, and Restarting Each Node Totemomail’s request dialog generates only 2048-bit keys without alternative names. However, many internal CAs now sign only 4096-bit keys. The key and request are therefore created with openssl, followed by ordering from the PKI team, PKCS#12 import, connector binding, and restarting each node. Kiteworks / Totemomail · 12 min read
13. Oct 5 HIN Mail Login: Webmail, Outlook Token, Forgotten Password, and HIN Mail Global Where and how to sign in to HIN Mail: webmail at webmail.hin.ch, mail tokens for Outlook and smartphones, login without the HIN Client using an SMS code or Authenticator app, password reset, and opening HIN Mail Global as a recipient without a HIN account. HIN Gateway · 7 min read
14. Oct 2 CVE-2026-104286: FortiMail Zero-Day Is Being Exploited - Workaround and Compromise Assessment Fortinet reports a critical, actively exploited path traversal vulnerability in FortiMail 7.2 through 8.0 (CVE-2026-104286, CVSS 9.8). A patch is not yet available. The workaround disables IBE or blocks Internet access to the management interface; indicators for assessing compromise are also available. FortiMail · 8 min read Warning
15. Which data center processes Claude? Tracing the connection and limiting processing to Switzerland or the EU Which stops a request to Claude passes through, why the trace ends at the Cloudflare edge, and what Anthropic discloses about its data centers. It also compares options with a fixed processing location (Anthropic API, AWS Bedrock, Google Vertex AI, Microsoft Foundry), the limits of a Switzerland-only setup, and the cost of regional binding. Claude · 12 min to read
16. New Exchange builds: Sep26SUv2 SE RTM Sep26SUv2 (15.2.2562.53) · 2019 CU15 Sep26SUv2 (15.2.1748.53) · 2019 CU14 Sep26SUv2 (15.2.1544.48) · 2016 CU23 Sep26SUv2 (15.1.2507.75) 4 builds Exchange build
17. Oct 1 Proton Drive CLI: Using Proton Drive from Scripts and Servers Since June 2026, Proton has offered an official command-line tool for Proton Drive. This article covers commands, signing in on servers without a desktop, conflict strategies for scripts, and its limitations compared with Rclone. Proton Drive · 9 min read
18. Proton Drive on Linux: The State of Play in October 2026 The official Linux client has been announced but is not yet available. The official Proton Drive CLI has been available for scripts and servers since June 2026; Proton Drive can still only be mounted with Rclone. What is missing is machine access limited to individual folders or tasks. Proton Drive · 8 min read
19. What exactly is Tailscale, and what advantages does it offer over traditional VPN connections? Tailscale uses WireGuard to create a mesh VPN in which devices connect directly rather than through a central VPN concentrator. Learn how coordination servers, NAT traversal, and DERP relays work together, the advantages over IPsec and SSL VPNs, and the dependencies and limitations you should know before deploying it. VPN and remote access · 11 min read
20. September 2026
21. Sep 29 Moving Windows to a Smaller SSD with Rescuezilla: From 1 TB to 512 GB Rescuezilla restores an image only to a disk that extends at least to the end of the final partition. Using a 1 TB NVMe as an example, this guide shows how to shrink C: with GParted, move the recovery partition, remove the dirty flag, and restore the new image to a 512 GB SSD. PC & Hardware · 9 min to read
22. Rescuezilla: Migrate Windows to a New SSD, with an Introduction to the Tool Rescuezilla is a free, Clonezilla-compatible imaging solution with a graphical interface. This article introduces the tool and shows the complete migration of a Windows installation to a new SSD: preparation in Windows, bootable USB drive, backup, verification, restore, and follow-up steps. PC & Hardware · 10 min to read
23. Sep 25 Brave Web Discovery Project: Why Long Word Segments in URLs Exclude Pages In the Web Discovery Project, Brave discards any URL whose path contains a word segment longer than 18 characters. German compounds such as Verschlüsselungsgateway are affected. Because Claude's web search is based on the Brave index, this also affects visibility in Claude. The source-code rule, further heuristics, the role of the canonical URL, a script for checking your own sitemap, a measurement using 825 terms in 24 languages, and an assessment of why the rule disadvantages compound-word languages. Claude · 13 min read
24. Kiteworks: Vendor Recommends Shutdown on September 26 – What Is Known So Far Kiteworks asked its customers to shut down all systems on Saturday, September 26, 2026, from 4:00 a.m. to 10:00 a.m. Final report: During the shutdown, the vendor found and closed a critical flaw without a CVE; on September 30, 125 advisories followed, including CVE-2026-54154 (CVSS 10.0) in the Email Protection Gateway. Totemomail is not affected. Kiteworks / Totemomail · 12 min read
25. Microsoft SharePoint: actively exploited vulnerability CVE-2026-65660 · Microsoft SharePoint Server Remote Code Execution Vulnerability CISA KEV Actively exploited
26. Sep 24 MailHeaderAnalyzer: Analyze Email Headers in PowerShell Without Network Access Reference for the MailHeaderAnalyzer PowerShell module: parameter overview, syntax, description, examples, and parameter properties for Get-MailHeaderAnalysis and ConvertTo-MailHeaderReport, plus the output object with delivery chain, authentication results, Exchange Online classification, and all finding codes. SMTP and Mail Flow · 16 min read
27. Sep 23 Mail loop with encryption gateway behind EXO - Prevent spoofing issues If the encryption gateway (HIN in this example) is behind Exchange Online, every incoming message reaches EOP a second time: with a foreign sender domain, an invalid DKIM signature, and the gateway IP as the source. The result is a spoof verdict and junk. Four settings prevent this without disabling filtering using SCL -1: a PTR record, Enhanced Filtering disabled, a spoof exception for the gateway infrastructure, and CloudServicesMailEnabled on both connectors. SMTP and Mail Flow · 9 min read
28. Sep 22 Closing a journaling gap: Exporting from Microsoft Purview and importing into Enterprise Vault If journal reports from Exchange Online fail for several days, they cannot be generated retroactively. However, the content still exists in the mailboxes. Learn how to export it as PST through the new Purview eDiscovery, why Enterprise Vault's PST Migrator is usually not an option, and how to reimport it through the journal mailbox without displacing the active journal stream, using two generic scripts for importing, moving, and logging. Archiving and journaling · 18 min read
29. Sep 8 New Exchange builds: Sep26SU SE RTM Sep26SU (15.2.2562.49) · 2019 CU15 Sep26SU (15.2.1748.51) · 2019 CU14 Sep26SU (15.2.1544.46) · 2016 CU23 Sep26SU (15.1.2507.73) 4 builds Exchange build
30. Sep 7 Exchange Online throttles and blocks outdated Exchange 2016 and 2019 servers starting in September 2026: How transport enforcement works Starting in the second week of September 2026, Exchange Online requires hybrid servers to have at least the October 2025 SU; otherwise, mail flow is throttled and later blocked. Background on transport enforcement since 2023, escalation stages with SMTP codes, the report in the Admin Center, the 90-day pause via PowerShell, and why the next increase will only allow ESU customers and Exchange SE. Exchange OnPrem / Hybrid · 9 min read
31. Sep 4 When the log fills the disk: properly limiting log4j2 RollingFile, using totemomail as an example A log volume filling up can bring down the entire gateway in the worst case. Why combining time- and size-based rotation without %i creates a single huge file, how strategy.max caps retention, the role of the log level, and where totemomail hides these values. Kiteworks / Totemomail · 9 min read
32. Sep 3 How Long Does an SMTP Session Stay Open? ConnectionTimeout 00:10:00 in Exchange and the Systems for Which That Is Too Short Exchange terminates every incoming SMTP session after ten minutes, even if it is currently transferring data. Which senders stay on a connection that long, how to determine the actual session duration from the protocol log, and when ConnectionTimeout and ConnectionInactivityTimeout should be adjusted on a relay connector. SMTP and Mail Flow · 10 min read
33. New Outlook: S/MIME signature cannot be verified in secondary account, attachments missing The new Outlook reports that the S/MIME signature cannot be verified in a secondary account for a shared mailbox and does not display attachments. This article explains the difference between Clear Signing and Opaque Signing, why attachments disappear from opaque-signed messages, why the new Outlook processes S/MIME only in the primary account, and what workarounds are available, including unpacking smime.p7m with PowerShell or OpenSSL. Outlook · 8 min read
34. Sep 2 Port Forwarding with netsh portproxy: Access Internal Services Through a Jump Host Windows includes built-in TCP port forwarding with netsh interface portproxy. Combined with a VPN such as Tailscale, it lets you access an internal service, such as a NAS interface, from outside without exposing it publicly. Learn how to set up, secure, and remove forwarding, and where its limitations lie: no UDP, no additional encryption, and certificate and redirect pitfalls. Windows client · 9 min read
35. Tailscale: Exit Nodes and Subnet Routes Compared, and How They Work Technically In Tailscale, exit nodes and subnet routers are two related but distinct operating modes. A subnet router selectively opens specific IP ranges, while an exit node routes all internet traffic through itself. What the difference means in practice, how Tailscale implements it through WireGuard, route approval, and SNAT, and where the limits of each option lie. Tailscale · 11 min read
36. Sep 1 Prerequisites for Remote PowerShell to Work PowerShell remoting rarely fails because of the command itself, but rather because of prerequisites: the WinRM service, listener, firewall, authentication, and the specifics of local accounts. What needs to be configured on the target and client sides, how to check it with Test-WSMan, and why Access denied usually has nothing to do with the password. Windows client · 10 min read
37. RustDesk: Setting Up the Open-Source TeamViewer Alternative RustDesk is open-source remote support software licensed under the AGPL, free of charge and self-hostable. Learn how to install the client on Windows (including unattended deployment via MSI), how connections work through the public rendezvous server, your own server, or a direct connection, which features are needed for day-to-day support, and where the limits of free use lie. Remote support · 9 min read
38. August 2026
39. Aug 31 CVE-2026-62911: Why 85 Percent of On-Premises Exchange Servers Are Vulnerable and What Is Technically Behind It The BSI reports that around 85 percent of on-premises Exchange servers in Germany are vulnerable to CVE-2026-62911. This article explains the vulnerability technically: MRSProxy, missing Channel Binding, NTLM relay, and Orange Tsai’s Pwn2Own chain, along with context for the figures and the specific recommended actions. Exchange OnPrem / Hybrid · 9 min read
40. Aug 28 Essential Controls for TotemoMail Admins: Stop the Server, Check Queues, and Clean Up in a Controlled Manner The key controls for operating a totemomail gateway: stop the service via systemd and the Tanuki control script, count queue contents per repository, inspect individual messages, clean up in a controlled manner, and restart the service. Kiteworks / Totemomail · 9 min read
41. NDR, DSN, Bounce: How to correctly distinguish non-delivery notifications NDR, DSN, bounce, reject, backscatter: The terms surrounding failed delivery are often used interchangeably, but they refer to different things. What the RFCs define, who generates which notification, how a DSN is structured, and why the distinction between reject and bounce determines backscatter. SMTP and Mail Flow · 10 min read
42. Passwordless Linux Server Access: Set Up SSH Key Login with PuTTY, Pageant, and More Admins who access Linux servers daily have to enter a username and password every time when using password login. An SSH key pair reduces this to a double-click: generate a key with PuTTYgen, store the public key on the server, and load Pageant. The same key works in WinSCP, MobaXterm, and OpenSSH, and if desired, takes you straight to a service account shell. Kiteworks / Totemomail · 9 min read
43. Sending mail through a relay: Checking TLS and authentication A one-pager for Application Managers whose applications send mail through a relay: Which three application settings matter (port, TLS mode, authentication), what the options are called in common environments, and how a single test email’s Received header proves that the connection is actually encrypted and authenticated. SMTP and Mail Flow · 5 min read
44. Aug 27 SMTP Load Testing with Numbered Recipients: Send Every Email Traceably A load test is only as good as its evaluation. With the -N option, smtp-source numbers every email via the recipient address without sacrificing throughput. Learn how to structure the run, how many sessions make sense, and how to automatically find missing numbers. SMTP Load Testing · 8 min read
45. smtp-source without installing Postfix: Extract load-testing tools from the RPM smtp-source and smtp-sink are part of Postfix, but they also run without an installed mail server. Learn how to extract the two tools from the package on RHEL, why running them from /tmp can fail because of the noexec mount option, and which libraries need to be included. SMTP and Mail Flow · 7 min read
46. Up to 10 Million Free Tokens per Day: Using OpenAI’s Data-Sharing Program with Cost Guardrails OpenAI gives organizations that share their API traffic for training a daily free allowance: depending on the tier, up to 10 million tokens. With prepaid credit, project limits, and a token budget in the code, usage remains free indefinitely. OpenAI API · 9 min read
47. Aug 26 Analyze Email Headers Without Uploading the Email: Locally in the Browser Instead of in a Web Tool Email headers contain internal hostnames, IP addresses, and personal data. Anyone who pastes them into an online tool sends this information to a third-party server. Why analysis does not need a server and what a tool running locally in the browser can do. SMTP and Mail Flow · 7 min read
48. AuthMechanism 10 and AuthAs Internal: How Exchange Classifies Message Submission in the Header The X-MS-Exchange-Organization-AuthMechanism header documents how a submitting server authenticated. Value 10 indicates a Receive Connector with Externally Secured and classifies external emails as internal, with consequences for spam filters, mail flow rules, and spoofing protection. Exchange OnPrem / Hybrid · 8 min read
49. compauth in Microsoft 365: Composite Authentication and All Reason Codes Microsoft 365 supplements SPF, DKIM, and DMARC with its own evaluation: compauth. What Composite Authentication checks, what pass, softpass, fail, and none mean, and what causes each reason code, from 000 to 905. Microsoft 365 / Exchange · 9 min read
50. F5 BIG-IP as an Outbound Proxy for Bulk Email Delivery: Persistence, SNAT, Timeouts, and DNS Resolution A bulk delivery of 1,000 emails per minute runs through a BIG-IP as an outbound proxy to the provider relay. This article explains why sticky sessions provide no benefit here, how to properly resolve the provider hostname using an FQDN node, and which SNAT, timeout, and connection-limit settings actually determine throughput. Load Balancers · 9 min read
51. Internal or External? Interpreting Exchange Hybrid Mail Headers: AuthAs, MessageDirectionality, and X-originatororg In Exchange hybrid environments, header classification determines whether an email is treated as internal. Which headers carry the classification, how tenant attribution works through certificates and connectors, and how to identify a misrouted message. Exchange OnPrem / Hybrid · 10 min read
52. Performing a BIOS Update Safely: A Guide Using ASRock AM5 as an Example, Including BitLocker Preparation The complete BIOS update process using an ASRock AM5 board as an example: determine the version, verify the download using a hash, properly suspend BitLocker, boot into UEFI (even if F2 does nothing), update with Instant Flash, and configure settings sensibly after the update. PC & Hardware · 8 min to read
53. VPN Split Tunneling for Microsoft Teams: Routing Media Traffic Around the Tunnel Teams calls over a VPN suffer from latency, jitter, and the detour through the VPN gateway. This article explains which Microsoft networks and ports handle media traffic, why IP-based split tunneling is superior to app exclusions, and how to implement it in consumer VPNs, WireGuard, OpenVPN, and enterprise clients. Microsoft Teams · 8 min read
54. Aug 25 Determining a Mail Server’s Load Profile: Bursts, Peak Rates, and Recipient Structure from Message Tracking How many emails per minute does your mail server really process, and how high are the peaks? How to use PowerShell and Exchange Message Tracking to determine the real load profile: rates per minute and hour, burst duration, recipient structure, message sizes, and common analysis mistakes. SMTP and Mail Flow · 9 min read
55. Claude Desktop keeps crashing: “GPU process gone” with exit code 101457950, cause and solution The Claude Desktop app on Windows exits completely with “GPU process gone: exitCode 101457950” (0x060C201E), often followed by the Store app repair dialog. The complete causal chain: Code Integrity blocks vk_swiftshader.dll, Chromium’s fallback chain runs out, and the built-in self-termination exits the app. With a permanent solution (switching to the classic installation without MSIX), self-diagnosis via the event log, and analysis down to the minidump. Claude · 10 min to read
56. Aug 24 Planning email load tests: Tools for 10,000-email bursts under Linux and Windows compared Anyone migrating a gateway or sizing an email environment needs reliable figures rather than gut feelings. Which tools generate bursts of tens of thousands of emails, what a clean test plan looks like, and how to evaluate the results from logs. SMTP and Mail Flow · 12 min read
57. RDP Printer Redirection: Print Through the Local PC Instead of the Remote Computer Print jobs from the RDP session should go to the printer next to the user, not to the remote computer. The setting is found in three places: the RDP client, the .rdp file, and the target system. Also covers handling the “Unknown Publisher” warning and a troubleshooting checklist. Windows client · 5 min read
58. SMTP Load Testing with Apache JMeter in Practice: 10,000 Emails, Five Rule Paths, One HTML Report A complete load test from A to Z: a test plan with a message mix along the ruleset paths of an encryption gateway, a portable setup without installation, 10,000 emails in a burst, and analysis using the JMeter HTML report—including the issues that actually occurred. SMTP and Mail Flow · 11 min read
59. Aug 20 Reading and Understanding Your Electricity Bill: An EKZ Bill, Line by Line Energy, grid use, metering, charges: What is really on a Swiss electricity bill, who sets each price, and which line items can be changed—plus an interactive sample bill based on the EKZ model. 9 min read
60. Is Joining a LEG Worth It? An Honest Example Calculation A 20 percent discount on grid usage sounds like money. The calculation based on EKZ’s offering shows that, for electricity consumers only, the LEG under the grid operator model is virtually cost-neutral, while producers fare better. The full calculation with all the numbers. 8 min read
61. New Tool: LEG Price Calculator Calculates in seconds what a local electricity community delivers financially: grid usage discount versus service fee, for consumers and solar producers. Preloaded with EKZ rates for 2026, all values adjustable, runs entirely in the browser. 3 min read
62. What Are These LEGs, Anyway? Local Electricity Communities Explained Since 2026, neighbors have been allowed to sell solar power to one another via the public grid: Local Electricity Communities (LEGs) make it possible. How 15-minute allocation works, what the 20 or 40 percent grid usage discount means, and how LEGs, ZEVs, and vZEVs differ. 7 min read
63. Aug 19 August 2026 Exchange Security Updates: Pwn2Own Vulnerability Fixed, OWA Light Disabled The August SU fixes seven vulnerabilities, including the Exchange exploit demonstrated at Pwn2Own 2026, and permanently disables OWA Light. Microsoft also explains why Exchange SUs are now released monthly and why Exchange SE CU1 is still delayed. Exchange updates (SU & CU) · 6 min read
64. Aug 18 Microsoft SharePoint: actively exploited vulnerability CVE-2026-55040 · Microsoft SharePoint Server Security Feature Bypass Vulnerability CISA KEV Actively exploited
65. Aug 11 Analyzing Exchange Mail Flow: Message Tracking, SMTP Logs, and Receive Connectors How to systematically determine where a message ended up in Exchange On-Premises, Hybrid, and Exchange Online: queries with sample output, how to read the SMTP log correctly, and the issues that regularly lead to incorrect conclusions. Exchange OnPrem / Hybrid · 22 min read
66. Rebuilding Apache James Rule Sets in a Structured Way: Tools and Method Mailet rule sets that have grown over the years contain dead paths that no one recognizes anymore. Learn how to analyze the rule set as a graph, reliably find unreachable code, and design the migration so that a single Mailet keeps the rollback path open. Kiteworks / Totemomail · 16 min read
67. What We Can Learn from Science for IT Troubleshooting Falsifiability, control groups, confounding variables, and sampling bias: the method natural sciences have used for centuries solves exactly the problems where IT troubleshooting regularly fails, illustrated with examples from mail flow. SMTP and Mail Flow · 15 min read
68. Who Is Actually Delivering to Your Tenant? Aggregating Sending IP Addresses A single report shows which systems actually deliver mail to your tenant: forgotten connectors, applications sending directly, and service providers nobody documented, including the typical analysis errors involving pagination logic and interpretation. Microsoft 365 / Exchange · 12 min read
69. New Exchange builds: Aug26SU SE RTM Aug26SU (15.2.2562.46) · 2019 CU15 Aug26SU (15.2.1748.49) · 2019 CU14 Aug26SU (15.2.1544.44) · 2016 CU23 Aug26SU (15.1.2507.72) 4 builds Exchange build
70. Aug 7 Common Causes of Mail Loops and How to Fix Them How to systematically identify and fix SMTP mail loops in Exchange Online, hybrid environments, and upstream mail gateways using NDRs, headers, Message Trace, recipient objects, and connectors. Exchange OnPrem / Hybrid · 12 min read
71. EXO Migration Without a Remote Move How to provision on-premises Exchange mailboxes in a controlled manner as new, empty Exchange Online mailboxes: PST backup, CSV approval, RemoteMailbox, synchronization, validation, and rollback. Exchange OnPrem / Hybrid · 12 min read
72. Aug 4 Guide for DNS Administrators: MX, SPF, DKIM, DMARC, and Common Pitfalls Anyone managing a zone will usually receive ready-made mail records and only needs to publish them. What regularly goes wrong: the 255-byte limit for DKIM, duplicate SPF records, the lookup limit, MX pointing to a CNAME, automatically appended zone suffixes, and policies nobody enforces anymore. SMTP and Mail Flow · 15 min read
73. Renewing a Certificate on the Cisco SMA Certificates can only be installed on the Cisco SMA through the CLI, and current AsyncOS versions validate the entire chain during import: without a stored root CA, the import fails. This article shows the paths to a new key pair, the OpenSSL approach in detail, how to handle OpenSSL 3's RC2-40-CBC error, and how to import the internal root CA into the appliance's trust store. Cisco ESA / SMA · 11 min read
74. Aug 1 HIN Platform Renewal 2026: Access Gateway, Client, and Deadlines Through September 14 Firewall approval by August 14, Access Gateway version 4 from August 17, SAML endpoints, hardware tokens, and HIN Client by September 14. The mail gateway is not affected and will be replaced separately. HIN Gateway · 5 min read
75. July 2026
76. Jul 31 Testing SMTP on Linux: From the TCP Connection to Delivered Email When an appliance stops delivering email, a manual SMTP test is more useful than any log. Learn how to check each layer using built-in tools, what different error patterns mean, and why a load balancer can distort diagnosis. SMTP and Mail Flow · 10 min read
77. Jul 30 Microsoft Entra Domain Services: LDAP and Kerberos for Cloud-Only Environments Entra ID does not speak LDAP or Kerberos. Microsoft Entra Domain Services provides a managed Active Directory domain that synchronizes users from Entra ID and offers traditional protocols. How it works, limitations, costs, and a real-world email gateway use case. Active Directory / Entra · 8 min read
78. Jul 29 Connect the SEPPmail Admin GUI to Active Directory: Configure LDAP Authentication Starting with 15.0.6 Starting with firmware 15.0.6, administrators of the SEPPmail appliance can authenticate against an external LDAP server such as Active Directory, including group mapping to the local admin group. Configuration under User > Advanced Settings, step by step. SEPPmail · 7 min read
79. SEPPmail 15.0.6 and 15.0.6.1: Security Fixes and New Admin Features In July 2026, SEPPmail released patch release 15.0.6 and hotfix 15.0.6.1. In addition to fixing vulnerabilities in PDF generation and PGP processing, the releases introduce a separate MFA field, LDAP authentication for the Admin GUI, and fixes for RuleEngine, webmail, and the REST API. SEPPmail · 5 min read
80. Jul 26 Running Paperless-ngx with Limited Storage: Offload Documents to a Cloud Service Paperless-ngx only needs the database, search index, and thumbnails locally; the documents themselves can reside in a cloud service. What the practical test showed and how to set it up with the ready-made template in three commands. Paperless-ngx · 6 min read
81. Running Rclone mounts reliably in Docker For a FUSE mount from a container to work on the host and in other containers, mount propagation, AppArmor, and recovery after failures must work together. Rclone · 9 min read
82. Testing Cold Storage with Rclone: A Practical Test Plan Before a service reads its files from the cloud through an Rclone mount, you should verify more than directory access. This test plan covers cold reads, warm reads, write operations, cache behavior, file integrity, and failures. Rclone · 11 min read
83. Jul 25 Midea V2, V3, and the Cloud API: What It Actually Means for the PortaSplit Local device protocol, private app endpoints, and the official partner API use similar version names. An analysis of the sources separates these layers and puts the shutdown warning into context. Home Assistant and IoT · 11 min read
84. Jul 24 Securing Midea PortaSplit in Home Assistant: Token, Key, and Home Network The PortaSplit token and key come from the Midea cloud and never expire. Learn how to back up these values, isolate the device on your home network, and keep Home Assistant, the integration, and firmware up to date in a controlled manner. Home Assistant and IoT · 14 min read
85. Midea PortaSplit in Home Assistant: Setup and Dashboard Step by step, from pairing with MSmartHome and integrating Midea AC LAN to a finished dashboard with metrics, controls, and history charts. Home Assistant and IoT · 10 min read
86. Jul 22 Run your own newsletter with Cloudflare Workers and D1 The open template provides signup, unsubscribe, queue, and database in your own Cloudflare account. A deploy button sets up Worker, D1, and CI without a local server. Cloudflare · 8 min read
87. Microsoft SharePoint: actively exploited vulnerability CVE-2026-50522 · Microsoft SharePoint Remote Code Execution Vulnerability CISA KEV Actively exploited
88. Jul 21 Running Claude Code Securely on Your Own VPS A hardened Debian VPS keeps Claude Code sessions persistently available. This guide covers everything from user accounts and SSH keys to firewalls, data hygiene, tmux, and secure access from an iPhone. Claude · 12 min read
89. Jul 17 Entra Connect Sync 2.6.84.0: What’s Changing and Who Should Update Now The security release brings Passkey support and changes to app authentication, PowerShell, and Password Hash Sync. The previous version was withdrawn, so the update requires a phased decision. Microsoft Entra · 11 min read
90. Jul 16 Microsoft SharePoint: actively exploited vulnerability CVE-2026-58644 · Microsoft SharePoint Remote Code Execution Vulnerability CISA KEV Actively exploited
91. Jul 15 Ghost Sender in Exchange Online: An MX Record Is Not a Firewall Direct delivery to Exchange Online bypasses an upstream gateway if the tenant does not explicitly block it. The risk is real; the cause is an incomplete mail flow configuration. Microsoft 365 / Exchange · 9 min read
92. Jul 14 Properly follow up on the July 2026 Exchange security updates Two cleanup tasks are needed after installation: safely remove the old CVE-2026-42897 mitigation and review overprivileged legacy groups in Active Directory. Exchange updates (SU & CU) · 6 min read
93. Microsoft SharePoint: actively exploited vulnerability CVE-2026-56164 · Microsoft SharePoint Server Elevation of Privilege Vulnerability CISA KEV Actively exploited
94. Microsoft Active Directory / Entra: actively exploited vulnerability CVE-2026-56155 · Active Directory Federation Services Elevation of Privilege Vulnerability CISA KEV Actively exploited
95. New Exchange builds: Jul26SU SE RTM Jul26SU (15.2.2562.45) · 2019 CU15 Jul26SU (15.2.1748.48) · 2019 CU14 Jul26SU (15.2.1544.43) · 2016 CU23 Jul26SU (15.1.2507.71) 4 builds Exchange build
96. Jul 11 Access Exchange Online with PowerShell: Replace EWS with Microsoft Graph EWS ends in Exchange Online on October 1, 2026. Learn how to register an app, authenticate a PowerShell script using a certificate, restrict access to individual mailboxes, and process messages and attachments through Microsoft Graph. Microsoft 365 / Exchange · 5 min read
97. Jul 8 Backing up and restoring the HIN Mail Gateway after a failure A cluster protects the HIN Mail Gateway against node failures, but it does not replace a backup. Configuration, key material, restore sequence and the changes introduced by Stargate are crucial. HIN Gateway · 15 min read
98. June 2026
99. Jun 26 Totemomail license limit reached: clean up orphaned users via LDAP Disabled AD accounts remain in totemomail and continue to consume licenses. With a verified LDAPS connection and the Cleanup Agent, Active Directory becomes the authoritative source. Kiteworks / Totemomail · 9 min read
100. Jun 19 HIN Mailgateway 15.0.5: Fixing Login Failures After a Cluster Update After updating an HIN Mailgateway cluster to version 15.0.5, login fails on both nodes after a few minutes. This procedure restores the appliances to operation in a controlled manner. HIN Gateway · 3 min read
101. Jun 17 Understanding Mail Routing Between TotemoMail and Exchange Online How TotemoMail stores and processes messages, how the underlying Apache James switches between processors, and what matters for a secure mail loop with Exchange Online. Kiteworks / Totemomail · 10 min read
102. Jun 9 New Exchange builds: Jun26SU SE RTM Jun26SU (15.2.2562.43) · 2019 CU15 Jun26SU (15.2.1748.46) · 2019 CU14 Jun26SU (15.2.1544.41) · 2016 CU23 Jun26SU (15.1.2507.69) 4 builds Exchange build
103. May 2026
104. May 7 New Exchange builds: May26HU SE RTM May26HU (15.2.2562.41) 1 build Exchange build
105. February 2026
106. Feb 10 New Exchange builds: Feb26SU SE RTM Feb26SU (15.2.2562.37) · 2019 CU15 Feb26SU (15.2.1748.43) · 2019 CU14 Feb26SU (15.2.1544.39) · 2016 CU23 Feb26SU (15.1.2507.66) 4 builds Exchange build
107. December 2025
108. Dec 9 New Exchange builds: Dec25SU SE RTM Dec25SU (15.2.2562.35) · 2019 CU15 Dec25SU (15.2.1748.42) · 2019 CU14 Dec25SU (15.2.1544.37) · 2016 CU23 Dec25SU (15.1.2507.63) 4 builds Exchange build