Patching & VulnerabilitiesTutorial
Chrome 153 is on Stable: update your browser, then check the version
Google promoted Chrome 153 to desktop Stable on September 8, 2026 with 230 security fixes. Update on Windows, Mac, or Linux, fully quit and relaunch, then confirm chrome://version shows 153.0.8010.x.
Michael Narehood5 min read
Guest and IoT Wi-Fi at home: keep visitors and gadgets off the main network
How to use your router's guest or IoT Wi-Fi so visitors, smart plugs, and cameras cannot reach the laptops, NAS, and printers on your main SSID.
Michael Narehood5 min read
September 2026 Patch Tuesday: update your Windows PC at home
Microsoft's September 8, 2026 updates include two exploited local privilege bugs plus Office Preview Pane risks. Check for updates, reboot, and confirm you are current.
Michael Narehood5 min read
Home IoT cameras and NVRs: keep them off your main Wi-Fi
A home-reader guide to doorbell cams, Wi-Fi cameras, and small NVRs: change defaults, skip UPnP port forwards, segment guest or IoT Wi-Fi, and prefer vendor apps or VPN over exposing the recorder.
Michael Narehood5 min read
MikroTik MikroTrick: update RouterOS now if you run one at home
MikroTik and CERT Polska warn that the MikroTrick RouterOS chain is being exploited when SSH is reachable from the internet. Update to a fixed build, then check Flagged status, logs, and unknown users.
Michael Narehood5 min read
Chrome CVE-2026-85046: update now, then check the version
Google patched an actively exploited V8 bug in Chrome 152.0.7977.82/.83. Update on your computer, relaunch, and confirm chrome://version before you assume you are done.
Michael Narehood4 min read
On-prem Exchange CVE-2026-62911: patch now, ESU clock is running
Public exploit code is circulating for CVE-2026-62911, Shadowserver still sees about 22k internet-facing unpatched servers, and Exchange 2016/2019 ESU ends in October 2026.
Michael Narehood5 min read
UniFi Whole-Home WiFi: when Express 7 mesh fits, and when it doesn’t
Ubiquiti’s Whole-Home WiFi pitch is Express 7 mesh for residences. Here is the homeowner cut: when the kit fits your house, when wired APs still win, and what 6 GHz actually buys you.
Michael Narehood7 min read
Chef's Kiss is now generally available
A complete tour of Chef's Kiss: import recipes from links and photos, organize your cookbook, plan meals, build shopping lists, cook step by step, and keep it synced across web, iPhone, and Android.
Michael Narehood24 min read
Apple's new Mac mini and Mac Studio: what businesses should buy
Apple refreshed Mac mini with M6 and M5 Pro, and Mac Studio with M5 Max and M5 Ultra. Here is how the four desktops compare for SMB deployments.
Michael Narehood7 min read
Ubiquiti Bulletin 067: patch UniFi OS, Protect, Access, and Talk now
Ubiquiti's August 2026 advisory covers 22 UniFi vulnerabilities. Here are the affected products, fixed versions, real risks, and a practical update checklist.
Michael Narehood6 min read
Browser-saved passwords are not a business control
Chrome, Edge, and Apple Passwords are useful autofill stores, but they are not a shared business vault for payroll, banking, or infrastructure logins.
Michael Narehood5 min read
Identity & AccessTutorial
Conditional Access for small tenants, without the theater
Security Defaults vs a short Conditional Access starter pack for Microsoft 365 shops under fifty people — MFA, legacy auth, and break-glass, not a 40-policy mess.
Michael Narehood6 min read
Identity & AccessTutorial
Five Entra sign-in checks worth doing every week
A five-minute Microsoft 365 sign-in log habit for small tenants: failed MFA, weird locations, legacy auth, admin devices, and new app consent.
Michael Narehood6 min read
1Password is (probably) the best password manager for home and work
An operator’s opinion: why 1Password is my default for personal use and small businesses, including the isolated Families account that comes with Business and MSP-provisioned seats.
Michael Narehood9 min read
Work files do not belong in a personal iCloud
Personal Apple IDs syncing Desktop and Documents feel convenient until someone leaves and the company cannot revoke the folder.
Michael Narehood5 min read
Apple Upgrade: leasing iPhones and Macs with Klarna
Apple Upgrade replaces the iPhone Upgrade Program in the U.S. with Klarna-backed leases for iPhone, Watch, Mac, and iPad. Terms, end-of-lease options, and what SMBs should watch.
Michael Narehood4 min read
OVSwrap (CVE-2026-64531): patch Linux for this local root
CVE-2026-64531 is a local privilege escalation in the Linux Open vSwitch datapath with a public PoC. Who is exposed, which stables are fixed, and what to do today.
Michael Narehood4 min read
VM-Setup: post-install Linux tooling that actually sticks around
A look at Narehood/VM-Setup, the menu-driven Bash utility for XCP-ng guests and generic Linux hosts, plus the newer update, pin-sync, and installer-hardening work.
Michael Narehood4 min read
Dotfiles with a Kali-style prompt you can actually customize
What’s in Narehood/dotfiles (bash/zsh, tmux, vim, screen) and the newer prompt.conf settings for emoji, colors, layouts, and safer install/uninstall.
Michael Narehood4 min read
