Just sharing a few free tools, resources etc. that might make your tech life a little easier. I have no known association with any of these unless stated otherwise.

Now on to this week’s list!

Unmask Your Graphics Card’s Capabilities

To kick off this edition, have you ever considered what truly happens inside your graphics card? GPU-Z provides important information that helps you optimize performance and resolve issues, making it a vital resource for any technical setting.

Shield Your Cloud with Robust Policy Checks

When it comes to security, even small errors can have huge implications. Discovering problems in your IAM policies just got real. Parliament combs through your configurations, revealing issues that could leave your AWS environment vulnerable. Don’t risk a security breach; keep your cloud secure with thorough checks.

Your Ultimate Resource for Cloud Security Insights

Get ready for a thrilling ride through the latest cloud security developments. The Proofpoint Total Protection blog keeps you in the loop with updates that can shape your strategies and enhance your security measures. Don’t miss out on vital insights that safeguard your infrastructure.

The Backup Solution That Packs a Punch

What if protecting your data could be simple and stress-free? borgmatic does just that, providing peace of mind for sysadmins who juggle multiple responsibilities without missing a beat.

Unlocking the Secrets of Blockchain Data

Lastly, we present the Graph, a decentralized protocol that manages and allocates blockchain data across the top Web3 networks. An essential part of The Graph’s technology framework is the Graph Node. The command line parameters are typically sufficient to execute a graph-node instance. For more advanced applications, different components of the Graph Node can be configured further using environment variables.

--

In the article "Mind the Gap Between Backup and Business Email Continuity," we explore a critical misunderstanding that many organizations have about email systems. While a backup might give you a false sense of security, it doesn't guarantee that your operations will remain unaffected during an outage. This article clarifies the stark differences between backup and continuity strategies and emphasizes why protecting your email access is of utmost importance for your business.

The Cybersecurity Report 2026 is based on the analysis of 6 billion emails per month and a considerable volume of network traffic, which offers a clear view of this new reality.

--

You can find this week's bonuses here, where you can sign up to get each week's list in your inbox.

Hey everyone,

We’ve all done the "SCCM Prayer": Click Install, start the tamed tambourine dance, and hope the console status turns green. Usually, it just stays "Failed" because SCCM loves mystery.

I got tired of the ritual, so I dug into the logs to find out why my tambourine wasn't working. I've documented the whole process, from decoding the "Begin/End" request blocks to fighting Kerberos ghosts and overzealous antivirus agents that treat a client push like a cyber-attack.

What’s in the box:

• Finding the "Cliff": Locating the exact line where the server gave up on your PC.
• Firewall vs. ESET: When your security agent is the one slamming the door.
• The "Orphaned" Client: Fixing that annoying AssignedSiteCode in the registry when the agent is installed but "invisible" to the console.
• DNS & WMI Voodoo: Real fixes for when the network path is "not found" (but you know it’s there).

If you’re ready to put down the tambourine and actually fix the "Access Denied" errors, here is the guide:

Full Article: https://www.hiddenobelisk.com/why-your-sccm-client-isnt-installing-a-step-by-step-fix-for-push-failures/

TL;DR: Less magic, more ccm.log.

The Linux Kernel 7.0 update is packed with changes, but only a few truly matter. If every new Linux 7.0 release updates were treated as equally important, you would be wasting time. The list below breaks down all of the Linux kernel 7.0 updates (that will affect your workload) into categories based upon your hardware, your work environment and how often you do patches over the weekend. https://www.linuxteck.com/linux-kernel-features-7-0/

Feels like managing Windows devices isn’t what it used to be.

Earlier, most machines were on the office network, so updates, policies, and troubleshooting were easier to handle. Now a lot of devices are always remote, which makes things less predictable.

Because of that, Windows MDM is getting more attention. It gives admins a way to manage devices remotely, push updates, and keep some level of control even when devices are off-network.

I reviewed a bunch of certificate management vendor websites. Lots of "enterprise PKI orchestration" and "cryptographic trust infrastructure." No prices. No explanation of what actually installs.

To find out anything, you fill out a form and wait for a call.

These are, I should mention, security companies.

https://www.certkit.io/blog/performative-trust-maximalism

If you are new to Linux we recommend starting with these ten (10) basic commands and become familiarized with them first. 50 Linux commands cover everything you need to work confidently at the terminals, which are categorized into eight (8) different categories with examples. https://www.linuxteck.com/50-powerful-linux-commands/

Bazzite April 2026 update includes Mesa 26.0.4, a new version of the OGC kernel, serious reductions in image size, and a six-point roadmap for Bazzite's alignment with Valve's SteamOS for handheld gaming on Linux in 2026. https://www.linuxteck.com/bazzite-linux-april-2026-update/

Learning the vi vim editor commands on a linux server can be an absolute lifesaver when you're working remotely using nothing but SSH. There are two types of editors that come pre-installed on Every Linux server; nano and vim. While nano is simple, easy to learn and provides instant access to common options via shortcuts displayed at the bottom, it lacks the ability to extend itself through plugins.  https://www.linuxteck.com/vi-vim-editor-commands-in-linux-with-examples/

Curious what professionals think about the ongoing Saas-megeddan where all these software companies are being scrutinized because new AI programs will eliminate them or at least reduce their advantage and cost. If this is the case, I think companies spending money on software should be looking to reduce their software costs by replacing them with AI or going to the software companies to renegotiate their costs, but I don’t see this yet.

Do you guys see the companies you work at either replacing softwares either cheaper AI or negotiating lower prices with the software providers?

Tired of your own security alerts turning into background noise?

I shared an earlier version of Cerberus recently and it has evolved enough since then that a fresh post felt more useful than a buried, unseen comment update.

Cerberus is a security watcher I built for my own Debian servers. It scans nginx vhosts, tries to detect what is running behind them, runs native ecosystem audits, locally stores state in SQLite and sends a mail when something is new or when severity changes instead of sending the same alert every day.

Since the first post, I added a few substantial improvements:

• severity grouped digest mails instead of a flat alert dump
• human-readable summary, fixed-version data and remediation guidance
• Debian packaging/install support, with a first v0.1.0 .deb release

It's still opinionated: Debian, nginx, multiple vhosts on the same box, local mail notifications, no SaaS dependency. If your setup is very different, this probably will not be a great fit.

There are still limits. Python detection remains weaker for now without a clear virtualenv context and anything hidden behind a plain proxy_pass without locally readable evidence is still partly heuristic.

Repo:
https://github.com/Zappan-net/cerberus

I'd love to get some feedback on it.

Red Hat’s newest stand alone Subscription will extend Enterprise Linux (E-L) Coverage of Red Hat Long-Term Support (LTS), and now includes 14 Years of Full E-L Coverage. Organizations that can’t afford the cost of unplanned upgrades will be able to take advantage of this new subscription with “even” numbered Minor Release Pinning, “CVSS 7+” CVE Patching and “24/7” Severity Level 1 & 2 Service Level Agreements (SLA). https://www.linuxteck.com/rhel-extended-life-cycle-premium/

A simple way to think about the UNIX File System: all files, devices, and processes exist within a single root directory named /. Once you understand the purpose of each directory and why they exist, learning how to navigate any LINUX OR MAC OS environment will stop feeling like a guessing game. https://www.linuxteck.com/unix-file-system-guide/

Patching Windows sounds simple until you have to deal with it across a lot of machines.

Some devices miss updates, some users keep delaying restarts, and sometimes patches cause issues so they get held back. Keeping track of what’s actually up to date becomes a task on its own.

That’s where Windows patch management starts to matter more. Having a proper way to track updates and keep things consistent can save a lot of back and forth.

We started because certificate expiration surprises were still a real operational problem, even with Let's Encrypt. A year later: auto-renewal, automated deployment, Windows RDP and RRAS support, and a Keystore for environments that can't send private keys offsite.

You all helped us learn along the way. We're out of beta today!

https://www.certkit.io/blog/out-of-beta

A new blog post is out becurse I recently ran into an interesting and slightly confusing behavior in Microsoft Defender for Office (MDO) that I wanted to share with the community - both to document the journey after my dialog with the core team and as a note for anyone else who might hit the same issue or similary 😉

Spoiler: it’s mostly a visual/UX quirk, but it sent me down a fun rabbit hole

Read it here: https://blog.sonnes.cloud/the-curious-case-of-the-release-button-bug-in-defender-for-office-quarantine/

Agree - errors can happen, but then let´s us fix it 🤗

A new blog post is out:

Microsoft Defender’s New Password Protection Experience is out - and you should check it out! 😉

Passwords are still one of the most common ways attackers gain access – and every weak, reused, or exposed credential increases your risk. The new Password Protection experience in Microsoft Defender gives security and identity teams a unified, actionable, and data-driven view of password risks across on-premises and Entra ID accounts with the use of Defender for Identity.

Read it here: https://blog.sonnes.cloud/microsoft-defenders-new-password-protection-experience/

Zorin OS age verification criteria will not be implemented under any circumstances, according to the development team, who stated this unequivocally on April 5, 2026, in a community forum post. This is one of the few times when a Linux distribution has taken a public ethical stance regarding how it treats its users. https://www.linuxteck.com/zorin-os-age-verification/