HTTP File Server

And Spanner Omni is now generally available, which means you can run Google's distributed database technology on your own infrastructure, including outside Google Cloud.

Then we have a lightning round with an actively exploited Netscaler vulnerability, Cloudflare becoming a certificate authority, and attackers scanning for vulnerable Rigetto HFS servers.

And the human closer comes from a Google Cloud networking incident where one person correctly followed the wrong procedure, another incorrectly followed the right procedure, and somehow the answer still included more training.

Let's get into it.

Cloudflare has spent years being one of the largest consumers of publicly trusted certificates.

Now it wants to issue them too.

And third, attackers are now scanning the internet for Regedo HFS servers vulnerable to CVE-2026-61500.

The weakness can allow session forgery, account takeover, and eventually remote code execution through HFS's server-side JavaScript capability.

Fortunately, the fix is as easy as 1.2.3. You just got to install version 3.2.1. Let's see.

Matt, the HFS vulnerability is interesting because AI-assisted research moved from finding a vulnerability to producing something that attackers could actually use.

How does that change the way that MSPs think about prioritizing vulnerabilities when new technical details or exploitation activity suddenly appears?

What I find interesting about the HFS vulnerability is that the severity of the vulnerability isn't necessarily a fixed thing.

When a vulnerability is first disclosed, we might know that it's serious, but we don't necessarily know how practical exploitation is.

Then someone publishes some technical details, a proof of concept becomes available, or we start seeing exploitation attempts taking place in the wild.

So if you've got Fortinet at the edge, assume the creds are burned because the odds are pretty good that they are.

If you're using Atlassian self-hosted tools, get that latest update pronto.

Top story number three.

Attackers are actively exploiting a critical vulnerability in Regetto HFS, a widely used file sharing server, after the flaw was identified with the help of artificial intelligence.

Security researchers say the issue can let remote attackers execute malicious code, putting exposed servers at risk of takeover and data theft.

The exploitation underscores how quickly newly disclosed and newly discovered flaws can be weaponized, raising urgency for organizations to patch and restrict public exposure.