Author: Jason Hower

Network Engineer for Lone Wolf Networks, LLC

Critical Zero-Click Outlook RCE: CVE-2026-40361 Demands Immediate Patching

A zero-click remote code execution vulnerability in Microsoft Outlook (CVE-2026-40361) allows attackers to compromise any Outlook user by simply sending a crafted email — no clicks required. Patched in Microsoft's May 2026 Patch Tuesday update, this CVSS 8.4 flaw affects all supported Office and Microsoft 365 Apps versions. SMBs must patch immediately.

Continue Reading

Windows Defender Zero-Days BlueHammer, RedSun, and UnDefend: Two Remain Unpatched as Active Exploitation Continues

Three Windows Defender privilege escalation zero-days — BlueHammer (CVE-2026-33825), RedSun, and UnDefend — are actively exploited in the wild. Microsoft patched BlueHammer in April 2026; RedSun and UnDefend remain unpatched. All three enable SYSTEM-level access from a low-privileged account.

Continue Reading

Critical Palo Alto PAN-OS Zero-Day (CVE-2026-0300): What SMBs Must Do Now

A critical, unauthenticated remote code execution vulnerability (CVE-2026-0300, CVSS 9.3) in Palo Alto Networks PAN-OS firewalls is being actively exploited by a state-sponsored threat group. Patches are not yet available. Here is what SMBs need to do right now to protect their networks.

Continue Reading

Windows Zero-Click Vulnerability Actively Exploited: What SMBs Must Do Before May 12

CVE-2026-32202 lets attackers steal Windows credentials with zero clicks. CISA deadline was May 12, 2026. Learn what SMBs must do immediately.

Continue Reading

Critical cPanel Vulnerability Actively Exploited in Ransomware Attacks

A critical authentication bypass (CVE-2026-41940, CVSS 9.8) in cPanel & WHM is being mass-exploited to deploy “Sorry” ransomware, compromising over 44,000 servers worldwide. Small businesses running web servers or shared Linux hosting face complete data loss. Patches are available now—immediate action is required.

Continue Reading

Managed IT and Cybersecurity Services for Temecula Area Businesses

Temecula-area businesses need secure, responsive IT support. Learn how Lone Wolf Networks helps reduce downtime, strengthen cybersecurity, and support growth.

Continue Reading

VMWare Per-VM EVC Option Missing

This is a short post to help anyone who may have been temporarily stumped trying to enable per-VM EVC for VMotion between clusters.

If you want to know more about per-VM Enhanced VMotion Compatibility, check out the VMWare KB HERE Read More

UniFi Cloud Key Gen 2 Plus – Firmware update fails

I was recently working on a UniFi deployment which included a UniFi cloud key gen 2 plus. The cloud key came from Ubiquiti with firmware version 0.9.8. Attempting to update the firmware resulted in the error “something went wrong” without getting past 1% on the progress.

Updating the controller and protect software was successful, but attempting to update the cloud key firmware from within the network application also failed. Read More

VMWare Vcenter Appliance Install Stuck Stage 2

When deploying VMWare VCSA in a lab environment the installer often gets stuck at stage 2 starting services. In my case, starting authentication network 2%. This seems to be an issue with VCSA wanting to verify the SSO domain through DNS resolution.

The solution for me was to create an entry in the hosts file of the VCSA appliance through SSH to the CLI. Before doing so, it is best to start from scratch. Delete the partially deployed VCSA appliance. Deploy VCSA through Stage 1 but do not enter Stage 2. Read More

Cisco – Define default GW based on source

Was recently working on a project for a client where the client needed to route traffic from a specific network over a T1 and send the rest of the traffic out the default gateway of the router.  In order to accomplish the task I configured policy based routing on the 2911 as follows:

interface GigabitEthernet0/0.4

encapsulation dot1q 4

ip address 10.2.1.1 255.255.255.0 Read More

Scroll to top