Blog
Security, networks and the occasional questionable decision, mostly with the Philippines in view.
PwnEscape (CVE-2026-99999): A Linux IPv4 Stack Bug Lets a VM Escape to Its Host
PwnEscape (CVE-2026-99999) is a critical bug in the Linux host's IPv4 stack, not KVM, that lets a guest VM read host memory, crash the host and, in the lab, run code on it. Proxmox, Debian and Fedora have fixes, but they only help after a reboot.
PEERSTITCH: How One Hacked FortiManager Exposed 500 Firewalls at a Telco MSP
Attackers broke into a telco MSP's FortiManager through CVE-2024-47575, stole configs and keys for 500+ FortiGates, then used a FortiOS path traversal flaw to plant PEERSTITCH, a memory-only implant. Here is what happened, what to patch, and how to hunt for it.
AWS Will Cut Its European Sovereign Cloud Off From the Global Backbone for Several Hours on Saturday
On Saturday, October 24, AWS plans to run its European Sovereign Cloud for several hours without the AWS Global Network backbone, using only EU internet providers. Here is what AWS says will happen, and what customers may notice.
The Leap Second Is Being Retired. UTC Goes Continuous on May 20, 2027
The world's timekeepers voted to stop adding leap seconds to UTC from May 20, 2027, letting clocks drift up to an hour from Earth's rotation. The goal is to avoid a first negative leap second, a risk for networks, GPS-timed systems and servers.
Supreme Court E-Notarization Goes Live Today: What Filipinos Need to Know
Electronic notarization goes live today, October 19. Accredited electronic notaries can now notarize documents for clients anywhere in the Philippines. Here is what the Supreme Court's rules cover, what is excluded, how identity checks work, and who offers it.
Attackers Are Exploiting a SiteGuard WAF Bug to Run Commands as Root or SYSTEM
A command injection flaw in SiteGuard Server Edition's statistics feature, on by default, is being exploited to run commands as root or SYSTEM. EG Secure Solutions has fixes and a patch. Save diagnostic data before you update, or attack traces may be lost.
CXMT's DDR5 Is Fast and Scaling Fast, but a RAM Flood Is Not Here Yet
A viral clip says Chinese DDR5 is about to flood the market. CXMT's speed results are real but date from July, and its capacity is growing fast. TrendForce still sees DRAM contract prices rising 10 to 15% in Q4 2026, so cheaper RAM is not here yet.
The Volunteer-Built BetterGov.PH Is Becoming the Official Gov.PH Portal, and Its Code Will Be Open
DICT and the BetterGov.PH volunteer network will co-develop the official Gov.PH portal, with the codebase opening on GitHub for public contributions. eGov platform version 2 is due November 9. Here is what was announced and what developers can do now.
New DICT Secretary de Claro Takes Office, Vows Cheaper Internet and Faster ISP Licensing
Robert Joseph de Claro formally took over the DICT from Henry Aguda on October 19 and used his first flag ceremony to promise lower internet prices, better telco service, and less red tape in licensing internet service providers.
Running 120B Models on a Mini PC: My Read of the Strix Halo Benchmarks
AMD's Strix Halo mini PCs can load 120B-class models into 128GB of unified memory. Bandwidth caps the speed, but published tests show MoE models running fast enough for coding agents. My read of the numbers, ROCm status and setup.
