Security & email
DNS, SPF/DKIM/DMARC, hardening, compliance — practical, not theoretical.
eMudhra CA key compromise — what Indian website owners and developers must check before 27 October
Eight eMudhra intermediate CA keys were recoverable. Browsers blocked them and Chrome drops the emSign ECC G3 root on 27 Oct. What to check and fix.
Read →Palo Alto GlobalProtect bug CVE-2026-0257 is now a ransomware entry point — check, patch and hunt this week
Unit 42 now links the PAN-OS GlobalProtect auth bypass CVE-2026-0257 to Qilin and Inc ransomware. Affected versions, the risky setting, and a 7-day plan.
Read →Next.js shipped two critical RCE fixes on 14 October — here is exactly what to patch this week (and why npm audit may stay quiet)
Next.js 16.4.1 and 15.5.28 fix two unauthenticated remote-code-execution bugs and a Server Actions DoS. Who is exposed, the one-command fix, the sharp trap on v15, and the Node.js patch due 21 October.
Read →SPF, DKIM and DMARC explained — why your business email lands in spam (and the 20-minute fix)
Gmail and Yahoo now reject unauthenticated bulk mail. Here is what the three records do, how to read them, the mistakes we see on most Indian business domains, and the exact records to publish for Google Workspace, Microsoft 365, Zoho and Hostinger.
Read →Studying or building something? Use the tools.
Subnet calculator, JSON formatter, DNS/email checker, Proxmox sizer and more — free, no sign-up.