John Z Black

John Z Black Mar 21, 2026 Vulnerabilities & Patching #ip-kvm #telnetd #remote management #attack surface #hardening

Old admin surfaces are back in focus for a reason. KVM and telnetd exposures keep showing up, and attackers still love them because they are privileged, under-monitored, and often forgotten.

What changed is the combo: legacy exposure plus faster modern delivery tradecraft. That means compromise paths stay simple while attacker execution keeps improving.

Do the basics immediately: inventory management interfaces, remove direct internet access, enforce MFA and source restrictions, rotate admin secrets, and alert aggressively on management-plane anomalies.

Read the full story: Get the full post on KVM, telnetd, and the admin-surface triage checklist