LEMON BLOG

Windows 11 upgrades are supposed to be boring. You click update, it restarts a few times, and you get back to work. But for a small group of users, the experience has reportedly been the exact opposite: upgrade completes, Windows loads… and suddenly the machine can't get online through Ethernet.

Active Directory is one of those things that "just works" in most Windows environments, which is exactly why attackers love it. When something in the authentication chain can be bent the wrong way, the blast radius isn't a single machine. It's the entire domain.

Apache Log4J has long been a trusted logging framework powering millions of enterprise applications worldwide. But a recently disclosed security flaw has raised serious concerns around the confidentiality of log data, especially for organizations that rely heavily on secure logging to track system behavior, user activity, and operational events.

In late 2025, Cloudflare quietly made history—not for something it built, but for something it stopped. The company revealed that it had detected and mitigated the largest recorded distributed denial-of-service (DDoS) attack to date, peaking at an astonishing 29.7 terabits per second (Tbps). To put that into perspective, this single attack was powerful enough to overwhelm the entire bandwidth capacity of many countries.

If your organization uses SonicWall's Secure Mobile Access (SMA100) appliances, it's time to take action. SonicWall has confirmed that cyber attackers are actively exploiting two serious vulnerabilities in these devices, prompting warnings from both the company and the U.S. Cybersecurity and Infrastructure Security Agency (CISA). Here's what's happening and what you need to do.