IT operations

David Grandolfo answers seven cybersecurity myths colleagues still hear, from a complex password being enough to "trust no one."

Windows CI builds always finish last, but is Windows really that slow? Benchmarking the same .NET build on GitHub-hosted Windows and Linux runners revealed that the default NuGet cache location on C: made package restore over three times slower. Learn how moving NUGET_PACKAGES and NUGET_HTTP_CACHE_PATH to the runner's temp drive cut Windows restore times by more than two thirds, and why cross-compiling the same build from Linux keeps surfacing optimizations like this one.

Vulnerability exploits now lead initial access, but stolen credentials still decide how far a breach goes. Here's why identity security remains your strongest defense.

Home Wi-Fi is still an easy target when routers ship with weak defaults. Here are nine practical tips, updated for 2026, to lock down encryption, admin access, guests, IoT devices, and more.

Access control comes down to three questions—who, what, and which resource—plus the one people forget: where the check actually happens. Here's why only server-side enforcement truly protects your data.

This post introduces Shadow Theory: a mental model for AI prompting that treats prompts as perspectives shaping what the model sees. It explains why better results often come from changing the angle of analysis rather than simply adding more instructions or context.

MSIX solves real packaging problems, but package identity and filesystem virtualization change where applications and settings live. For ISVs, the settings path is the bigger risk: customer state, rollback, support workflows, and migration from MSI all depend on predictable paths.

UniGetUI's new Minimum Age for Updates setting delays software updates by a configurable number of days, giving the community time to catch compromised packages before they reach your machines.

PowerShell's MSI deprecation exposes the problem with treating MSIX like a better MSI: user-registered packages can disappear from SYSTEM, breaking services, scheduled tasks, remoting, and automation.

AI phishing is making scams harder to detect. Learn simple user checks and key security controls to reduce risk, protect workflows, and limit the impact of compromised credentials.

By 2026, AI will power both cyberattacks and defenses. The real advantage won’t come from automation alone, but from how effectively organizations control identity and privileged access.

Discover how Devolutions supports ISO/IEC 27001:2022 IAM controls with centralized identity management, secure authentication, privileged access governance, and enforceable least-privilege access.

Managing separate GitHub accounts for work and personal projects? Learn how to configure SSH keys, URL rewriting, and conditional git settings to automatically select the right identity—plus where GitHub's tools still need manual account switching.

Discover 2026 cybersecurity trends: identity as the new perimeter, AI-driven defense, and stronger incident response to boost resilience and reduce security fatigue.

Learn what CVEs (Common Vulnerabilities and Exposures) are, why they matter, and how Devolutions ensures transparency and security through responsible vulnerability management and clear advisories.

Discover why identity has become the new cybersecurity perimeter in 2025 and how SMBs can strengthen security with limited resources.

Intermittent .NET host processes locking your build outputs? MSBuild's node reuse feature causes file locking in complex build systems. Learn how MSBUILDDISABLENODEREUSE fixes years of sporadic build failures, why this optimization backfires, and when you should disable it.

HECVAT is a standardized toolkit that helps institutions assess vendor cybersecurity. Devolutions solutions align with HECVAT to enhance access control, credential protection, and auditability.

Microsoft’s 2025 Digital Defense Report reveals that profit-driven attacks now dominate cybersecurity incidents, with 80% linked to data theft and over half involving extortion or ransomware.

Devolutions has published a prefilled SIG Lite questionnaire in its Conveyor Trust Center, offering a transparent view of its security posture to simplify vendor assessments and due diligence.

Visual Studio build logs are noisy and useless for real insight. MSBuild binary logs reveal what the IDE hides: where time is spent, which analyzers drag, and why projects rebuild. Learn how to capture .binlog files and finally see the truth behind your .NET builds.

CISA is shifting the CVE Program’s focus from rapid growth to quality, emphasizing stronger data, partnerships, transparency, and improved vulnerability management.

Hamilton's cyber claim denied—no MFA. A costly reminder to prioritize backups, forensics, and long-term cybersecurity resilience.

Windows leaves behind hidden proxy configurations in the ProxyMgr registry that break apps even after disabling proxy settings. Learn how to identify and completely eliminate these phantom settings that affect system services like Kerberos authentication.

A hands-off experiment building a Rust-based Model Context Protocol (MCP) proxy tool using only GitHub Copilot agent mode. Covers setup, multi-transport support, and lessons learned from letting Copilot do all the coding.

Microsoft’s Remote Desktop client (MSRDC) is being deprecated, and recent updates have broken MsRdpEx support. Learn how to download and pin a stable version, disable auto-updates, and preserve access before MSRDC goes away for good.

CVE-2025-48817 allows RCE via Microsoft’s RDP client. Exploitation needs only user interaction. No known attacks yet, but immediate patching is urged to prevent potential threats.

Learn how to disable the Windows 11 taskbar search box for all users by default using PowerShell and registry edits. Includes a deep dive into why the setting gets reset and how to prevent it with a reliable fix.

Learn how to automate the cleanup of ghost Hyper-V network adapters and migrate static IP configurations using PowerShell. This post walks through detecting stale adapters, reassigning IP settings, and setting up a scheduled task to keep your lab environments self-healing on boot.

Devolutions has renewed its SOC 2 Type II report for the period of January 1 to December 31, 2024, reaffirming the strength and effectiveness of its security controls for Devolutions Cloud.

Learn how to automate taskbar app pinning in Windows 11 using PowerShell by generating a LayoutModification.xml file and forcing the shell to reinitialize the layout without creating new user profiles.

Learn why mstsc requires the RD Gateway to act as a KDC proxy for Kerberos authentication, how this undocumented behavior causes silent NTLM downgrades, and how to fix it by enabling the KDC proxy service.

The cybersecurity talent gap isn’t about interest—it’s about skills. Hiring managers now prioritize technical capabilities over resumes, and seek talent from outside traditional pools.

Learn why AD CS may silently skip CRL publishing when the server is turned off or running with constrained resources, leading to revocation errors like CRYPT_E_REVOCATION_OFFLINE. This post breaks down the root cause, highlights overlooked pitfalls in default AD CS configurations, and provides practical fixes using PowerShell, HTTP CRL distribution, and scheduled tasks.

Discover how to disable Bing search in the Windows Start Menu for faster, more responsive local search results. This step-by-step guide shows how to modify the registry with PowerShell or a .reg file, apply the setting for all users, and optionally use Group Policy or Intune to deploy the change across an organization. Improve Start Menu performance and streamline your Windows experience.

Learn how to isolate a Windows system service into its own process for easier debugging. This guide walks you through identifying service process IDs, listing service group members, and using PowerShell to move a service into a new, dedicated service group.

Broadcom warns of critical VMware flaws already exploited. Immediate update advised.

DeepSeek’s iOS app is riddled with critical security vulnerabilities—weak encryption, insecure storage, and data sent to China. NowSecure warns: ban it until fixed.

Learn how to set up a TUN-based virtual network interface in Windows using WinTun and tun2socks, route traffic through a SOCKS proxy, and build your own custom VPN solution from scratch

Using SSE-C, Codefinger exploits SSE-C to block access to S3 data, warning of deletion without payment.

Ensuring robust security while driving productivity is a constant challenge. Devolutions offers solutions that balance security and efficiency.

Explore how PowerShell enables interprocess communication (IPC) using named pipes in .NET applications, allowing seamless remote control and API access. This hands-on guide walks through creating custom named pipes, using Enter-PSHostProcess for connection, and integrating PowerShell with your .NET projects to enhance flexibility and streamline automation workflows with real-world examples.

Cybercrime is intensifying, with soaring costs, increased SMB threats, remote work risks, and a surge in phishing and ransomware, highlighting the urgent need for stronger cybersecurity measures.

Explore the essential steps to secure Mac RDP connections using Kerberos authentication with a focus on troubleshooting Protected Users and NTLM issues. This guide provides practical solutions for configuring Kerberos in an Active Directory environment, ensuring robust security for remote desktop access.

Devolutions has renewed its SOC2 Type-II report for the third consecutive year. This achievement underscores our commitment to top-tier security and compliance standards.

In this article, Devolutions shares Gartner’s nine key trends for 2024 that security and risk management leaders should focus on to enhance organizational resilience and cybersecurity performance.

Enable PowerShell 7 WinRM remoting for efficient server management without relying on SSH. This post provides a straightforward method to incorporate PowerShell 7 into Windows environments, ensuring compatibility and simplifying remoting tasks with practical code snippets and configuration advice.

In this article, we discuss Gartner’s Top 10 Strategic Technology Trends for 2024.

This post guides through decompiling Hyper-V Manager to rebuild it from source, aiming to assess its value for potential open-sourcing. It explores manual and automated decompilation processes, including troubleshooting and enhancing the tool, advocating for community-led improvements to this widely-used but neglected software.

Discover the worst passwords of 2023 and their security risks. Learn which passwords to avoid and get tips to improve your password security and protect your data.