CommPulse

Based on the GitHub advisory published by n8n maintainer csuermann and Security Joes' disclosure via The Hacker News, here's the architectural impact: an authenticated user with workflow create/edit rights can craft arrow-function expressions that escape n8n's expression sandbox and execute arbitrary OS commands as the n8n process. Fixed in 2.31.5/2.32.1, no patched 1.x release listed, n8n Cloud exposure unconfirmed. Security Joes found it while re-probing the earlier CVE-2026-27577 fix for a bypass — second-gen escape of an already-patched boundary. Successful exploitation can also expose N8N_ENCRYPTION_KEY, meaning stored credentials (Slack, DB, cloud API keys) become decryptable. For background on why credential-rich automation layers keep producing these blast radii, see our writeup on the Docker CVE-2026-34040 AuthZ bypass: https://www.techgines.com/post/n8n-sandbox-escape-vulnerability-arrow-function-rce Anyone running n8n at scale — how are you scoping workflow-edit permissions? Full RBAC per-team, or still relying on "trusted users only" as your primary control? submitted by /u/Expert_Sort7434 [link] [comments]

I used to be able to see Cache Statistics (hit rate per URI) in the CloudFront console, but the navigation link is missing now. The documentation page mentions no changes to this functionality. https://preview.redd.it/yeh6l8oidwfh1.png?width=402&format=png&auto=webp&s=da846a092d9013fad3cb0b24e97047fab4afd3b7 submitted by /u/synack [link] [comments]

Hi everyone, I am a Network Engineer with about 1 year of experience as a Cloud Solution Architect. I have AWS Certified Solutions Architect – Associate and Cisco CCNA certifications. Recently, my company assigned me to study for and obtain the Google Cloud Professional Cloud Architect certification. Aside from basic hands-on labs during my universiy (which is a few years ago), I haven't spent much time on GCP yet. I’m looking for advice on learning path to prepare for the exam. I would like to ask for your experience on how to achieve this certification, such as: Which courses or study resources should I take? (My company allows me to purchase courses on Udemy, but any recommendation is welcome!) Which practice/mock exams are most effective? Any tips for the exam preparation Thanks in advance for sharing your experience and tips! submitted by /u/Uncl3_L4k3 [link] [comments]

I'm hoping someone can point me in the right direction because I've been troubleshooting this for days and I'm running out of ideas. I created a brand new Azure account about a week ago. It started as a Free Trial, and I upgraded it to an Azure Plan (Pay-As-You-Go) . From the beginning, the subscription has behaved oddly. Initially several resource providers weren't registered automatically, and I also had some issues with Entra. Those seem to have mostly resolved, but I still can't deploy VMs. Whenever I create a VM in East US , most common VM sizes are unavailable. For example: Standard_D2s_v3 Standard_B2s Bpsv2 family Many others The portal reports: Things I've already verified Subscription status is Active Subscription type is Azure Plan I'm the Owner Microsoft.Compute is Registered Resource Groups create successfully East US regional vCPU quota exists The issue occurs across multiple VM images I also checked Usage + Quotas and noticed some VM families (such as Bpsv2 ) show 0 of 0 quota, while others have quota available. At this point I'm trying to determine whether this is: A subscription provisioning issue A quota/access issue A hidden policy/restriction Or something else I'm overlooking Has anyone seen a brand new Azure Plan subscription behave like this? If so, what ended up being the cause? Any suggestions would be appreciated. I've exhausted the normal troubleshooting steps I know of. submitted by /u/Benji_style68 [link] [comments]

Hello everyone, I am looking to pivot to AI engineering and currently exploring roadmaps to get in the industry. I stumbled upon this Medium article sharing a 4-step roadmap to AI Engineering. https://medium.com/@anubhavgoyal101/c80bd754c753 To the AI engineers out there. Is this an ideal roadmap? submitted by /u/robgparedes [link] [comments]

I’ve noticed that many AWS environments become increasingly expensive over time, and I’ve seen this firsthand as well. One thing that helped was implementing cost allocation tags to better understand where the spending was coming from. What other practices, tools, or strategies have worked well for keeping AWS costs under control? submitted by /u/yashashp [link] [comments]

One of our clients wants to build a commercial web application on Red Hat JBoss and isn’t interested in moving to microservices or Kubernetes. We explained the potential benefits of modern architectures, but based on their previous experience, they still prefer a traditional JBoss-based approach. The application is expected to handle a large number of users on a daily basis. For those with experience running JBoss in production, how would you approach this? Is JBoss alone still a solid choice for a high-traffic system, and what challenges should be considered? submitted by /u/yashashp [link] [comments]

Hi All, Not really a SysAdmin question but I’m sure there are people in here with a solution. We are rolling our Claude and Cowork (and code) but have run into a few incidents where the cowork data couldn’t be opened by Claude (for whatever reason). Has anyone got a working solution to this? I have several CEOs breathing down my neck because they lost a week or two worth of data. Any help is appreciated! submitted by /u/Flashy-Departure-445 [link] [comments]

I’ve tried searching but haven’t gotten any conclusive answers. Medium enterprise environment with about 60 MFPs at the primary site and 3-4 at 200+ satellite locations. Currently we use AD LDAP to provide a GAL for printers for end users. But we’ve been moving most things to M365 native instead of hybrid which has become a problem for shared mailboxes and other cloud only objects which aren’t discoverable as there isn’t an on prem stub. Since then we’ve started back on hybrid shared mailboxes identities, reluctantly. Wondering what native or unified tools exist for our mix of Lexmark and Sharp MFPs and what others are doing to provide address book functionality. Other things like getting rid of print servers, mobile device support, etc would be nice but not within the scope of my current question. submitted by /u/chesser45 [link] [comments]

Disclaimer: I’m building a tool around ShadowAI, but this post is more about the discussion. I won’t promote or mention what I’m building. With the recent rhetoric around open source models, the risks associated with them, and now a coalition of major tech companies throwing their support behind open source, it makes me wonder whether this is becoming a growing concern for sysadmins, IT managers, and CISOs when it comes to governance and maintaining visibility. I imagine the risk around insider threats becomes more significant submitted by /u/BenSimmons97 [link] [comments]

💎 One CDK trial per user! New users enjoy up to 50% off on their first order! 🎁CDKey： 2N72-AA3R-7865 S5LU-V4P8-RKVT CNZD-VHNE-RRDY 7PY6-9PMV-VKKV UDUJ-JP6R-D2FQ Enter the CDK in your account dashboard to start your free trial! ✅99.92% high stability, low latency, easy integration, and transparent billing. ✅Free generous trial available. 24/7 technical support – IP issues are compensated with replacements to ensure uninterrupted business.

NOTE: I am willing to exchange with another greencloud VPS as well; of similar specs; on US or EU location. I need US/EU now so selling this so as to fund US/EU node or exchange it . For exchange do send a comment or PM; and we can discuss the specifics. Features: CPU: 8 Cores Eypc Milan RAM: 32 GB Storage: 250 GB Bandwidth: 5TB Product: Black Friday 2025 - BF2025 SG 2 (DC2) Recurring Amount: $120.00 USD Billing Cycle: Annually Next Due Date: 29th April 2027 System Info: Processor : AMD EPYC-Milan Processor CPU cores : 8 @ 2445.404 MHz AES-NI : ✔ Enabled VM-x/AMD-V : ✔ Enabled RAM : 31.3 GiB Disk : 246.1 GiB VM Type : KVM IPv4/IPv6 : ✔ Online / ✔ Online GB: https://browser.geekbench.com/v6/cpu/18752794 1381 Single-Core Score 7084 Multi-Core Score Payment Methods: Stripe via Card (preferred) or Paypal only Ask: $100; Transfer cost paid by you

So far I've found these providers offering small VPSes for $3 or less per month in Finland: Gullo (Hetzner) Upcloud (own DC) Unclear if qualify Godlike (under $3 plan is just a promotion that does not renew) FinlandVPS (no network information that can be verified) Disqualified HostVDS (routes domestic traffic through Russia) The.hosting (routes domestic traffic through Sweden, shutting down operations) Tietokettu (outside Helsinki metro area)

I’m curious if anyone has podcasts around IT in general that they would recommend? There’s quite a few CyberSecurity ones out there that I’ll listen to but just a general engineering podcast? I’d love it. I don’t care if it’s Azure, AWS or even development. Stories from the trenches or even better what’s happening in Azure, MDM or similar. I enjoy my Darknet Diaries but I’d love a more practical side whether it’s discussions or news bites. YouTube recommendations are welcome also but I’d like something I can listen to while working. submitted by /u/autojack [link] [comments]

Not a sales post, genuinely curious how common this actually is. A lot of solo and small-team founders end up being the ones who set up their own cloud infrastructure!! not because they're security experts, but because there's no one else around to do it. I did the same thing, and while learning cybersecurity properly (separate from my actual business), I found real, would've-been-embarrassing misconfigurations sitting in my own AWS account. Nothing had gone wrong yet. I just had no idea they were there. Tools for catching this already exist, but they're mostly built by and for security professionals the output assumes you already know what IAM privilege escalation or CloudTrail coverage means. If you don't have that background, the report is basically noise you scroll past. So I built one that just tells you plainly: this is wrong, here's what someone could actually do with it, here's the exact fix. Free, open source, runs on your own machine with your own credentials nothing gets uploaded anywhere. If you've set up your own AWS account and never had anyone properly check it would you actually want to know what's sitting in there, or is this the kind of thing you'd rather not think about until something breaks? submitted by /u/kavee-core141 [link] [comments]

Not sure how many of you are Lenovo houses, but I've only recently become aware of Lenovo blocking boot on any devices, software, etc that is not 'Lenovo approved', which is really just Windows and certain versions of Ubuntu (if you run Intel CPUs, no AMDs). Needless to say, this is severely limiting our software devs who are looking to move their platform to linux based OSes. Anyone encountered this? Are other manufacturers doing the same? Anyone successful at getting around it? I've tried Ubuntu(AMD cpu), Mint, Rocky......even using Ventoy.....nothing boots or even recognizes the drives as bootable devices, all UEFI bootable, secure boot off, 3rd party CAs on. All boot in my older Dells and Asus laptops in UEFI mode. Any feedback or suggestions would be greatly appreciated. submitted by /u/brnstormer [link] [comments]

One of my users Onedrive stopped working and they didn't realise for 5 days. The claimed they were working on a Excel spreadsheet saved on their desktop and the file had lost all formatting. It was saved as a CSV file (which you can format as much as you like, but when you save it'll warn you that formatting won't be saved. I took at look at the file and there was only file history from 6 days ago (it was CSV then too). I'm pretty sure Onedrive had stopped running and somehow they were totally oblivious. Of course they're shitty at me about having to re-do their work. Has anyone ever encountered this before? What can you even do? Is there a way to be alerted if Onedrive has no activity for more than x number of hours/days. submitted by /u/spidey99dollar [link] [comments]

Company wants wpa3 enterprise with free radius an ldap and asked me to do it. I set up the certificates and everything else, and things work great! Except IOS devices can't seem to connect. For some reason IOS devices try to connect using MD5, despite me setting TTLS as the default type. googling and asking AI says that I have to have a mobile config file on apple devices in order to make it work. Management really doesn't want people with Iphones to require a mobile config they have to download. Is there a good workaround so that the iphones at my company can connect to the hotspot and sign in using their LDAP credentials without requiring the use of a mobileconfig file? submitted by /u/carefree_dude [link] [comments]

Hi All I'm wondering if anyone has found any tools that we can use internally to record our Systems, dependencies, DRP and BCP plans to easily update and generate documents as needed. We currently have them as individual word files for the BCP/DRP but as we add/remove systems I feel this might become quite hard to track/manage with variance with contract/saas vendors ect. Does something like this exist? Happy with any options to start looking into Cheers S submitted by /u/Whole_Photograph4698 [link] [comments]

Hi guys, I’m looking for a GPU server for a short batch-processing job. Requirements: Hourly billing 24 GB VRAM minimum RTX 3090 / 4090 / A5000 or similar Preferably 48 GB if the price is good Ready-to-use image with CUDA + vLLM or Ollama OpenAI-compatible API would be ideal Qwen 14B/32B or similar model Good disk/network speed for downloading models Around 5–15 hours of usage initially I don’t need a monthly dedicated server or a long-term contract. Just something quick to deploy, run the batch and destroy afterwards. Any provider offering free trial credit, initial credit or a cheap test would be even better. I already know RunPod and Vast.ai, but I’m curious if anyone here knows a smaller provider or a good current deal. Thanks!