IT operations

By 2026, AI will power both cyberattacks and defenses. The real advantage won’t come from automation alone, but from how effectively organizations control identity and privileged access.

Discover how Devolutions supports ISO/IEC 27001:2022 IAM controls with centralized identity management, secure authentication, privileged access governance, and enforceable least-privilege access.

Managing separate GitHub accounts for work and personal projects? Learn how to configure SSH keys, URL rewriting, and conditional git settings to automatically select the right identity—plus where GitHub's tools still need manual account switching.

Discover 2026 cybersecurity trends: identity as the new perimeter, AI-driven defense, and stronger incident response to boost resilience and reduce security fatigue.

Learn what CVEs (Common Vulnerabilities and Exposures) are, why they matter, and how Devolutions ensures transparency and security through responsible vulnerability management and clear advisories.

Discover why identity has become the new cybersecurity perimeter in 2025 and how SMBs can strengthen security with limited resources.

Intermittent .NET host processes locking your build outputs? MSBuild's node reuse feature causes file locking in complex build systems. Learn how MSBUILDDISABLENODEREUSE fixes years of sporadic build failures, why this optimization backfires, and when you should disable it.

HECVAT is a standardized toolkit that helps institutions assess vendor cybersecurity. Devolutions solutions align with HECVAT to enhance access control, credential protection, and auditability.

Microsoft’s 2025 Digital Defense Report reveals that profit-driven attacks now dominate cybersecurity incidents, with 80% linked to data theft and over half involving extortion or ransomware.

Devolutions has published a prefilled SIG Lite questionnaire in its Conveyor Trust Center, offering a transparent view of its security posture to simplify vendor assessments and due diligence.

Visual Studio build logs are noisy and useless for real insight. MSBuild binary logs reveal what the IDE hides: where time is spent, which analyzers drag, and why projects rebuild. Learn how to capture .binlog files and finally see the truth behind your .NET builds.

CISA is shifting the CVE Program’s focus from rapid growth to quality, emphasizing stronger data, partnerships, transparency, and improved vulnerability management.

Hamilton's cyber claim denied—no MFA. A costly reminder to prioritize backups, forensics, and long-term cybersecurity resilience.

Windows leaves behind hidden proxy configurations in the ProxyMgr registry that break apps even after disabling proxy settings. Learn how to identify and completely eliminate these phantom settings that affect system services like Kerberos authentication.

A hands-off experiment building a Rust-based Model Context Protocol (MCP) proxy tool using only GitHub Copilot agent mode. Covers setup, multi-transport support, and lessons learned from letting Copilot do all the coding.

Microsoft’s Remote Desktop client (MSRDC) is being deprecated, and recent updates have broken MsRdpEx support. Learn how to download and pin a stable version, disable auto-updates, and preserve access before MSRDC goes away for good.

CVE-2025-48817 allows RCE via Microsoft’s RDP client. Exploitation needs only user interaction. No known attacks yet, but immediate patching is urged to prevent potential threats.

Learn how to disable the Windows 11 taskbar search box for all users by default using PowerShell and registry edits. Includes a deep dive into why the setting gets reset and how to prevent it with a reliable fix.

Learn how to automate the cleanup of ghost Hyper-V network adapters and migrate static IP configurations using PowerShell. This post walks through detecting stale adapters, reassigning IP settings, and setting up a scheduled task to keep your lab environments self-healing on boot.

Devolutions has renewed its SOC 2 Type II report for the period of January 1 to December 31, 2024, reaffirming the strength and effectiveness of its security controls for Hub Business and Hub Personal.

Learn how to automate taskbar app pinning in Windows 11 using PowerShell by generating a LayoutModification.xml file and forcing the shell to reinitialize the layout without creating new user profiles.

Learn why mstsc requires the RD Gateway to act as a KDC proxy for Kerberos authentication, how this undocumented behavior causes silent NTLM downgrades, and how to fix it by enabling the KDC proxy service.

The cybersecurity talent gap isn’t about interest—it’s about skills. Hiring managers now prioritize technical capabilities over resumes, and seek talent from outside traditional pools.

Learn why AD CS may silently skip CRL publishing when the server is turned off or running with constrained resources, leading to revocation errors like CRYPT_E_REVOCATION_OFFLINE. This post breaks down the root cause, highlights overlooked pitfalls in default AD CS configurations, and provides practical fixes using PowerShell, HTTP CRL distribution, and scheduled tasks.

Discover how to disable Bing search in the Windows Start Menu for faster, more responsive local search results. This step-by-step guide shows how to modify the registry with PowerShell or a .reg file, apply the setting for all users, and optionally use Group Policy or Intune to deploy the change across an organization. Improve Start Menu performance and streamline your Windows experience.

Learn how to isolate a Windows system service into its own process for easier debugging. This guide walks you through identifying service process IDs, listing service group members, and using PowerShell to move a service into a new, dedicated service group.

Broadcom warns of critical VMware flaws already exploited. Immediate update advised.

DeepSeek’s iOS app is riddled with critical security vulnerabilities—weak encryption, insecure storage, and data sent to China. NowSecure warns: ban it until fixed.

Learn how to set up a TUN-based virtual network interface in Windows using WinTun and tun2socks, route traffic through a SOCKS proxy, and build your own custom VPN solution from scratch

Using SSE-C, Codefinger exploits SSE-C to block access to S3 data, warning of deletion without payment.

Ensuring robust security while driving productivity is a constant challenge. Devolutions offers solutions that balance security and efficiency.

Explore how PowerShell enables interprocess communication (IPC) using named pipes in .NET applications, allowing seamless remote control and API access. This hands-on guide walks through creating custom named pipes, using Enter-PSHostProcess for connection, and integrating PowerShell with your .NET projects to enhance flexibility and streamline automation workflows with real-world examples.

Cybercrime is intensifying, with soaring costs, increased SMB threats, remote work risks, and a surge in phishing and ransomware, highlighting the urgent need for stronger cybersecurity measures.

Explore the essential steps to secure Mac RDP connections using Kerberos authentication with a focus on troubleshooting Protected Users and NTLM issues. This guide provides practical solutions for configuring Kerberos in an Active Directory environment, ensuring robust security for remote desktop access.

Devolutions has renewed its SOC2 Type-II report for the third consecutive year. This achievement underscores our commitment to top-tier security and compliance standards.

In this article, Devolutions shares Gartner’s nine key trends for 2024 that security and risk management leaders should focus on to enhance organizational resilience and cybersecurity performance.

Enable PowerShell 7 WinRM remoting for efficient server management without relying on SSH. This post provides a straightforward method to incorporate PowerShell 7 into Windows environments, ensuring compatibility and simplifying remoting tasks with practical code snippets and configuration advice.

In this article, we discuss Gartner’s Top 10 Strategic Technology Trends for 2024.

This post guides through decompiling Hyper-V Manager to rebuild it from source, aiming to assess its value for potential open-sourcing. It explores manual and automated decompilation processes, including troubleshooting and enhancing the tool, advocating for community-led improvements to this widely-used but neglected software.

Discover the worst passwords of 2023 and their security risks. Learn which passwords to avoid and get tips to improve your password security and protect your data.

In this article you will learn how to leverage the PAM module in Devolutions Server to secure the Teams Administrator role in MS Teams.

In this article, we explore why a growing number of insurance companies are requiring that companies have PAM controls as a pre-condition for getting cybersecurity coverage.

Learn to create and debug PowerShell binary modules in Visual Studio, covering both local and remote debugging. This guide simplifies the development process for PowerShell modules, enhancing productivity with practical examples and troubleshooting tips for common issues.

To mark Cybersecurity Awareness Month at Devolutions, we have asked our security teams to put together a list of seven essential cybersecurity tips that they believe every SMB should follow.

Discover the intricacies of Active Directory's Kerberos KDC certificate selection for PKINIT, including techniques for choosing a specific certificate, analysis using IDA Pro, and PowerShell cmdlets for managing certificates. This deep dive explores the challenges and solutions for ensuring the right KDC certificate is used, overcoming the unpredictability of certificate selection in Windows environments.

From an increase in ransomware payments to a surge in IoT malware attacks, the numbers you’ll see in this article are alarming. But, don't worry! We have good news too.

A deep dive into Active Directory LDAPS certificate selection, detailing the technical intricacies of ensuring secure communications through TLS. This guide covers the validation and selection process, including PowerShell scripts for certificate management, aiming to clarify and resolve common issues with LDAPS implementation.

This post tackles the challenges of RDP Network Level Authentication (NLA) with Azure AD, labeled as the PKU2U nightmare, offering detailed solutions for common problems. It addresses enabling PKU2U authentication, Azure AD workplace joining, the correct Azure AD username format, and third-party application support, providing both technical insights and practical steps to mitigate these issues in Azure AD environments.

Navigate through the confusion of "the specified user name does not exist" error during RDP smartcard logon, offering insights into common misinterpretations and actionable solutions. This post breaks down error messages, suggests disabling strict KDC validation, and guides on certificate trust validation, ensuring successful authentication with practical steps and PowerShell commands.

In this article, Mathieu Morrissette from the Devolutions Security Team discusses the improvements offered by CVSS v4.0, promising more accurate, granular, and flexible vulnerability assessments.