AllTech InsightsSecurity advisories, incident reports, guides, and explainers from the AllTech engineering team in northern Utah.https://askalltech.comen-usRansomware Gangs Exploit PAN-OS GlobalProtect Flawhttps://askalltech.com/insights/pan-os-globalprotect-cve-2026-0257-ransomwarehttps://askalltech.com/insights/pan-os-globalprotect-cve-2026-0257-ransomwareQilin and Inc operators are attempting CVE-2026-0257 against Palo Alto GlobalProtect VPNs. Who is affected, fixed versions, and what to check first.Thu, 22 Oct 2026 00:00:00 GMTSecurity Advisorycybersecurityvulnerabilityransomwarevpnpatchingincident responsePHP2Shell: Two Critical PHP Flaws, What to Do Nowhttps://askalltech.com/insights/php2shell-critical-php-vulnerabilityhttps://askalltech.com/insights/php2shell-critical-php-vulnerabilityPHP2Shell lets an unauthenticated attacker run code on servers that serve PHP. Fixed versions, where PHP hides in your business, and what to do first.Thu, 22 Oct 2026 00:00:00 GMTSecurity Advisorycybersecurityvulnerabilitypatchingphpmanaged socThe 10-Step SASE Framework: Which Steps Applyhttps://askalltech.com/insights/sase-10-step-journeyhttps://askalltech.com/insights/sase-10-step-journeyCloudflare's 10-step SASE framework was written for enterprises. What it maps to for a small or mid-sized business, and where most should stop.Thu, 27 Aug 2026 00:00:00 GMTGuidecloudflarezero trustsasecybersecuritynetworkingGiving Contractors Access Without a VPN Clienthttps://askalltech.com/insights/third-party-access-without-vpnhttps://askalltech.com/insights/third-party-access-without-vpnContractors and temps on personal devices are a real access problem. A browser-based alternative to VPN clients, and where it does and doesn't fit.Thu, 27 Aug 2026 00:00:00 GMTGuidecloudflarezero trustremote accesscybersecurityThe Business Case for Replacing Your VPNhttps://askalltech.com/insights/vpn-replacement-business-casehttps://askalltech.com/insights/vpn-replacement-business-caseNew research shows most organizations are already moving off VPNs for Zero Trust access. The data on why, and what it takes to get leadership buy-in.Thu, 27 Aug 2026 00:00:00 GMTGuidecloudflarezero trustvpncybersecurityFileless PowerShell Attack Behind Node.jshttps://askalltech.com/insights/fileless-powershell-nodejs-backdoorhttps://askalltech.com/insights/fileless-powershell-nodejs-backdoorA ClickFix-style attack on a Cache Valley business skipped the disk entirely: a memory-only PowerShell payload that dropped a signed-runtime backdoor.Tue, 18 Aug 2026 00:00:00 GMTIncident Reportincident responsecybersecuritycase studyclickfixmanaged soc502 Bad Gateway Error: Causes and How to Fix Ithttps://askalltech.com/insights/502-bad-gateway-errorhttps://askalltech.com/insights/502-bad-gateway-errorA 502 bad gateway error means a server in your request chain got an invalid response from another server. Here's what causes it and how to fix it.Fri, 14 Aug 2026 00:00:00 GMTExplainermanaged ittroubleshootingweb hostingnetworkingWhat a ClickFix Attack Looks Like From the Insidehttps://askalltech.com/insights/clickfix-police-departmenthttps://askalltech.com/insights/clickfix-police-departmentA high-severity alert at a small-town Utah police department began with a pasted command. How it was detected, investigated, and closed in 15 minutes.Fri, 07 Aug 2026 00:00:00 GMTIncident Reportincident responsecybersecuritycase studymanaged socRetiring the Corporate VPN: A Phased Rollouthttps://askalltech.com/insights/cloudflare-zero-trust-vpn-migrationhttps://askalltech.com/insights/cloudflare-zero-trust-vpn-migrationHow AllTech retires a corporate VPN in phases with Cloudflare Zero Trust, from app discovery and Access/Tunnel rollout to safe decommissioning.Tue, 10 Feb 2026 00:00:00 GMTGuidecloudflarezero trustvpnmigration