The Blue Heron Weekly

Pluralsight vs Udemy vs Coursera for Cloud Pros (2026)

Pricing, labs and depth checked this week, plus the Microsoft Learn sandbox change that makes hands-on practice the real deciding factor.

Check Point CVE-2026-123039 Is Exploited: Patch by Nov 16

A root-level Gaia bug chained with PHP2Shell hit unpatched Mobile Access gateways. Here's the fix, the stopgap and the hunt.

Security+ to Cloud Security: Your 2027 Certification Path

Chrome Zero-Day CVE-2026-125350: Force the Update Now

An exploited Chromium XML bug is on CISA KEV. Here's how to patch Chrome, prep Edge and make sure browsers actually restart.

Azure Virtual WAN vs Hub-and-Spoke: Pick the Right Topology

Cost, routing, scale and who runs the hub at 2 AM: a practical way to choose your Azure network design.

Barracuda ESG Root Chain Is Exploited: Patch by Nov 13

Two chained flaws hit ESG, WAF and four more Barracuda products. Patch, lock down the Admin UI, and check your Azure NSGs.