DSE security knowledge hub

IT
Knowledge

Page 12 of the DSE IT knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Explore this topic

IT knowledge center

Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.

Start with the cornerstone guide
DSE post stream

IT

199 articles
DSE visual briefNetworks & infrastructure

Verify telecom diversity through last-mile paths, power, equipment, and shared facilities

Two provider names do not prove two survivable communications paths. Trace building entrances, conduits, central offices, power, customer equipment, upstream facilities, DNS, routing, support, and failover behavior before calling a design diverse.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefDSE engineering

Turn a DSE Update into an owned assessment, change, and verification record

A public update can start an investigation; it cannot prove local applicability or authorize a production change. Capture source and review context, identify affected assets, assess risk, approve and test the change, verify results, and retain evidence.

Published Reviewed 4 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefCyber defense

CVE-2026-70329 in Outlook: What the 8.8 RCE Means and How to Respond

Microsoft has fixed CVE-2026-70329, an Outlook integer-overflow vulnerability rated CVSS 8.8. Exploitation requires a user to open a malicious Office file. Review the exact affected editions, deploy the August 11 security release, and verify the installed build by servicing channel.

Published Reviewed 5 min readBy Gavin Stewart
Read the briefing
DSE visual briefContinuity & recovery
GuideImportantBusiness ContinuityIT

Place a failover-cluster witness outside the failure domain it must arbitrate

A quorum witness is a deciding vote, not a decorative cluster setting. Select cloud, disk, or file share from the topology; isolate its dependencies from the failures it must resolve; validate access from every node; and retest after cluster or site changes.

Published Reviewed 3 min readBy Gavin Stewart
Read the guide
DSE visual briefNetworks & infrastructure
ChecklistImportantITNetworks & Infrastructure

Govern Windows DNS scavenging as a deletion change, not routine cleanup

Windows DNS aging can identify stale dynamic records, and scavenging can delete them. Inventory timestamps and registration owners, align intervals with DHCP and client behavior, restrict scavenging servers, pilot one zone, and prove recovery before enabling automation.

Published Reviewed 3 min readBy Gavin Stewart
Read the checklist