Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This Keycloak update (version 26.7.3) fixes 20 security issues found during internal review. None of them are rated Critical for running…
Read MoreIcinga 2 live-creation requests are no longer lost during reload During a Director deployment, Icinga 2 reloads its configuration in the background. Previously, live-creation requests could still be processed for a short time after a reload had been requested. This created a race condition: a request could be processed by the old Icinga 2 process…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.49 CVEs Elastic Agent Kibana Most of the 11 CVEs are authorization and access control weaknesses affecting Kibana, including…
Read MoreHistorical log data is valuable—until the cost of keeping every shard online starts competing with the value of the data itself. Elasticsearch searchable snapshots offer a practical middle ground for a NetEye installation: keep an index in a snapshot repository, mount it when an investigation needs it, and query it through Elasticsearch or Kibana without…
Read MoreImportant: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This vulnerability, tracked as CVE-2026-18963 (CVSS 9.1, Critical), affects the reset-credentials authentication flow in Keycloak. Due to improper state validation, an…
Read MoreOne of the most common questions we hear is: “Why don’t we just put everything into one PDF?” It’s a fair question. After all, that’s how documentation has worked for decades. Buy a washing machine? You get a user manual. Buy a printer? You get a user manual. Buy a coffee machine? You get a…
Read MoreIn a world where RAM and CPU demands are increasing exponentially (and prices too) and 4 GB of RAM seems like nothing nowadays, let’s have some fun again and learn some assembly and machine code with a RISC-V processor with 16 KB of Flash memory and 2 KB of SRAM (yes, kilobytes). This series will…
Read MoreImportant: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.49 Summary This release fixes authorization bypasses in /v1/events filter expressions and a node-to-node memory-exhaustion DoS, while also preventing sensitive data from…
Read MoreRKE2 Otel Collector DNS requirement During updates and first installations on systems where the Elastic Stack feature module was installed, an extra requirement was present. In particular, the DNS defined in the resolv.conf of the machine was required to resolve the domain set as frontend domain the in the /etc/neteye-environment.yaml. This requirement was now dropped…
Read MoreImportant: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.49 CVEs Elasticsearch Fleet Server Kibana Most of the 36 CVEs are Denial of Service vulnerabilities affecting Elasticsearch (uncontrolled…
Read MoreIntroduction My last post was Migrating a NetEye Server to New Hardware (Part 1), so take a look at that one if you haven’t already and then continue reading the rest of the Migration process here. Fix Unix Users and Groups (Only on Clusters) The NetEye installation process unfortunately doesn’t fix user/group ID’s for the…
Read MoreGLPI 11 install and upgrade issue We identified and fixed a bug that could cause the neteye install or neteye upgrade command to fail on clusters in case the service was not running on the same node as Icingaweb2 Keycloak install issue We identified and fixed a bug that could cause the neteye install command…
Read MoreThis is the second part of a two-part series. Part one, Decentralized Identity Systems Concepts, introduced the why and the what. This article explains the how. Part one established the core idea: Instead of a central identity provider sitting in the middle of every trust relationship, users hold digitally signed credentials in a wallet, issuers…
Read MoreHow we investigated an unusual Icinga 2 performance issue with no obvious infrastructure cause. One of the more interesting investigations I’ve worked on recently started with a puzzling symptom: Normal check scheduling was delayed, but there was no apparent reason why. CPU, memory, and disk I/O looked fine. The incident had started shortly after some…
Read MoreAs threat analysts, we spend our days dissecting malicious code, tracking infrastructure, and reverse-engineering adversary tactics. But what happens when the threat actor refuses to even let us see the payload? In recent years, the Cyber Threat Intelligence (CTI) landscape has witnessed a massive shift. Adversaries have realized that the best way to protect their…
Read More