NetworkingTutorial
A guest Wi-Fi setup that won’t expose the office
Build guest Wi-Fi as an internet-only security zone, with real firewall isolation, sensible access, and tests that catch leaks into business networks.
Michael Narehood6 min read
LinuxTutorial
How to update Ubuntu
A straightforward checklist for keeping Ubuntu Server or Desktop patched: apt update, upgrade, reboots, and what to verify before you walk away.
Michael Narehood3 min read
Identity & AccessTutorial
Turn on MFA for Microsoft 365 before the next phish
A practical path to require multifactor authentication in Microsoft 365 for a small business, without locking everyone out on Friday afternoon.
Michael Narehood3 min read
Hugging Face's July 2026 incident: when an AI evaluation escaped its boundaries
Hugging Face and OpenAI documented an autonomous model crossing evaluation and production boundaries. Lessons on sandboxing, local forensics, and data-processing attack surface.
Michael Narehood7 min read
What “good enough” endpoint security looks like for an SMB
A realistic endpoint baseline for small businesses: patching, MFA, EDR, backups, and least privilege, without pretending you need a Fortune 500 stack.
Michael Narehood3 min read
WordPress Core CVE-2026-63030: patch 7.0.1 and older branches now
Critical unauthenticated RCE (wp2shell) hits WordPress 7.0.0–7.0.1 and 6.9.0–6.9.4. What the CVEs mean, which versions are fixed, and what SMBs should do today.
Michael Narehood4 min read
Grok 4.5: xAI’s coding-first model lands in Cursor and the API
Grok 4.5 launched mid-July 2026 as a jointly trained SpaceXAI and Cursor model aimed at coding, agents, and knowledge work. What shipped, where to get it, and how to use it without buying the hype.
Michael Narehood3 min read
OpenAI GPT-Red and what prompt injection means for your Copilot rollout
OpenAI's internal GPT-Red red-teaming model shows how automated prompt injection testing scales. Practical steps for businesses deploying Copilot, agents, and AI connectors.
Michael Narehood6 min read
July 2026 Patch Tuesday: when AI discovery floods the CVE queue
Microsoft's 663-CVE July 2026 release reflects AI-assisted vulnerability discovery. What MSPs and SMBs should change in triage without freezing from volume anxiety.
Michael Narehood6 min read
HostingTutorial
Inventory your public websites before the next CVE
A repeatable method for finding, owning, classifying, and safely retiring public websites and forgotten subdomains before a vulnerability lands.
Michael Narehood6 min read
How we triage critical CVEs for clients
A practical way to rank vulnerability work using exposure, exploitation evidence, business impact, and change risk instead of CVSS alone.
Michael Narehood6 min read
IT OperationsTutorial
Incident first-hour checklist
A practical first sixty minutes for scoping an incident, stopping active harm, preserving evidence, securing identity, and giving leadership facts instead of guesses.
Michael Narehood6 min read
Microsoft 365Tutorial
Power Automate and OAuth app sprawl
A practical way to inventory Power Automate identities, control OAuth consent, assign durable ownership, and keep important flows alive through staff changes.
Michael Narehood6 min read
Windows Hello for Business vs the passkeys path
How SMBs should use Windows Hello for Business, device-bound passkeys, and synced passkeys without creating three half-finished passwordless projects.
Michael Narehood6 min read
Anthropic’s Claude Fable 5: Mythos-class AI with guardrails
Claude Fable 5 brings Mythos-class capability to general users, with classifiers that fall back to Opus 4.8 on high-risk topics. What launched, what Mythos 5 is for, and how to think about it for real work.
Michael Narehood4 min read
Identity & AccessTutorial
Shared admin secrets in a team vault
How small IT teams store shared admin passwords and API keys in a password manager without Spreadsheet-of-Doom habits.
Michael Narehood3 min read
Microsoft 365Tutorial
SharePoint permissions inheritance traps
How SharePoint inheritance, groups, sharing links, and unique permissions interact, plus a safe method for reviewing access without breaking the site.
Michael Narehood6 min read
MicrosoftTutorial
RDP gateway habits for small shops
Remote Desktop still runs small businesses. These gateway and access habits keep it off the open internet without breaking legitimate work.
Michael Narehood3 min read
Spam filter tuning without blind spots
Aggressive block lists feel productive until legitimate mail vanishes. How to tighten filtering without losing invoices, MFA codes, and vendor threads.
Michael Narehood3 min read
Choosing a business ISP failover plan
How to choose a genuinely independent backup circuit, size it for essential work, and test automatic failover before the primary ISP goes dark.
Michael Narehood5 min read
