<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Alan Bonnici</title>
    <description>The latest articles on DEV Community by Alan Bonnici (@chribonn).</description>
    <link>https://dev.to/chribonn</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F2784519%2Fac701164-137d-4c1f-85db-60de96007fbf.png</url>
      <title>DEV Community: Alan Bonnici</title>
      <link>https://dev.to/chribonn</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/chribonn"/>
    <language>en</language>
    <item>
      <title>When Your CPU Dies: My Journey with a Defective Intel Core i7-13700K</title>
      <dc:creator>Alan Bonnici</dc:creator>
      <pubDate>Tue, 09 Jun 2026 07:00:00 +0000</pubDate>
      <link>https://dev.to/chribonn/when-your-cpu-dies-my-journey-with-a-defective-intel-core-i7-13700k-426p</link>
      <guid>https://dev.to/chribonn/when-your-cpu-dies-my-journey-with-a-defective-intel-core-i7-13700k-426p</guid>
      <description>&lt;h2&gt;
  
  
  Introduction
&lt;/h2&gt;

&lt;p&gt;My perfectly stable homelab server gradually descended into chaos — random crashes, segfaults, system hangs — and how months of troubleshooting, community support, and hardware swaps eventually led to one conclusion: &lt;strong&gt;the CPU itself was defective from the factory&lt;/strong&gt;. &lt;/p&gt;

&lt;p&gt;If you're experiencing unexplained instability on an Intel 13th or 14th Gen system, this story might save you months of frustration.&lt;/p&gt;




&lt;h3&gt;
  
  
  Quick Symptom Checklist
&lt;/h3&gt;

&lt;p&gt;If you're seeing multiple of these symptoms, you may be affected:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Random segfaults in unrelated applications
&lt;/li&gt;
&lt;li&gt;System instability appearing after months of stability
&lt;/li&gt;
&lt;li&gt;Crashes or hangs under light load or while idle
&lt;/li&gt;
&lt;li&gt;VMs freezing while still marked as "running"
&lt;/li&gt;
&lt;li&gt;Issues persisting despite PSU, RAM, or OS checks or changes
&lt;/li&gt;
&lt;/ul&gt;




&lt;h2&gt;
  
  
  The Setup
&lt;/h2&gt;

&lt;p&gt;In &lt;strong&gt;November 2022&lt;/strong&gt;, I built a homelab server with the following components:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Component&lt;/th&gt;
&lt;th&gt;Model&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;CPU&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Intel Core i7-13700K (Raptor Lake)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Motherboard&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;ASUS PRIME Z690-P D4 (Intel Z690, ATX, DDR4)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;RAM&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Patriot Viper Steel DDR4 3600 MHz C18, XMP 2.0&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Cooler&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Cooler Master Hyper 212 Black Edition&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;PSU&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Corsair RM-850e&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;OS&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Proxmox VE&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;The system ran &lt;strong&gt;Proxmox VE 7&lt;/strong&gt;, later upgraded to &lt;strong&gt;v8&lt;/strong&gt;, hosting a mix of Windows, Ubuntu, and Debian VMs, plus a couple of LXC containers. For over a year, everything was rock-solid. NUT (UPS monitoring), LAN bonding, automated backups — all worked flawlessly.&lt;/p&gt;




&lt;h2&gt;
  
  
  The Trouble Begins: A Timeline
&lt;/h2&gt;

&lt;h3&gt;
  
  
  August–September 2024: First Signs of Instability
&lt;/h3&gt;

&lt;p&gt;After upgrading VirtIO drivers from 0.1.248 to 0.1.262, I started seeing &lt;strong&gt;x86/split lock detection&lt;/strong&gt; errors. The entire Proxmox host would crash, taking down all VMs and containers. &lt;/p&gt;

&lt;p&gt;Even though I didn’t fully trust that theory, I pointed a finger at the VirtIO upgrade — it was the only change I had made.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What the community said:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;"Don't think VirtIO would make the whole host crash... this seems more like a hardware issue with storage or memory"&lt;/li&gt;
&lt;li&gt;"Split lock is an indication of your VM doing some weird stuff... generally related to very buggy software/OS or faulty hardware — bad memory, bad CPU, bad power supply"&lt;/li&gt;
&lt;li&gt;Suggestions: Run memtest, stress-test the CPU, check thermals, check fans&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;I disabled split lock detection as a workaround. The crashes continued.&lt;/p&gt;

&lt;h3&gt;
  
  
  September 2024: Testing Everything
&lt;/h3&gt;

&lt;p&gt;Following community advice, I:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Ran PassMark memory tests&lt;/strong&gt; — no errors
&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Updated the motherboard BIOS&lt;/strong&gt; - I was one version before the latest&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Ran stress-ng&lt;/strong&gt; on the CPU — no errors&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Replaced the PSU&lt;/strong&gt; with a spare one I had.&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  October 2024: Stability... or So I Thought
&lt;/h3&gt;

&lt;p&gt;The issue appeared to disappear.&lt;/p&gt;

&lt;p&gt;On 17 October 2024, I reported back to the Proxmox forum that the system seemed stable. I waited a full month before posting to be sure. I assumed—incorrectly—that the component I had changed was the culprit.&lt;/p&gt;

&lt;p&gt;The stability was temporary—the degradation was progressive.&lt;/p&gt;

&lt;h3&gt;
  
  
  December 2024 – January 2025: New Symptoms Emerge
&lt;/h3&gt;

&lt;p&gt;New problems surfaced:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;A Windows Server 2022 VM would &lt;strong&gt;hang during backup restarts&lt;/strong&gt;
&lt;/li&gt;
&lt;li&gt;QEMU guest agent fs-freeze/fs-thaw commands would time out
&lt;/li&gt;
&lt;li&gt;VMs appeared "running" but were unresponsive
&lt;/li&gt;
&lt;li&gt;Console showed improper shutdown states
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;I tried:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Switching backup modes
&lt;/li&gt;
&lt;li&gt;Changing machine types (q35 → i440fx)
&lt;/li&gt;
&lt;li&gt;Updating QEMU
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Nothing resolved the issue.&lt;/p&gt;

&lt;h3&gt;
  
  
  February 2025: The Penny Drops
&lt;/h3&gt;

&lt;p&gt;While continuing to seek help on Reddit, &lt;strong&gt;someone pointed me to the Intel 13th/14th Gen instability issue&lt;/strong&gt;. The symptoms matched perfectly:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Random crashes under varied workloads&lt;/li&gt;
&lt;li&gt;Segfaults in unrelated binaries&lt;/li&gt;
&lt;li&gt;System hangs after running for days&lt;/li&gt;
&lt;li&gt;Progressive worsening over time&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;It was suggested that I run the &lt;strong&gt;Intel Processor Diagnostic Tool (IPDT)&lt;/strong&gt; (&lt;a href="https://www.intel.com/content/www/us/en/support/articles/000005567/processors.html" rel="noopener noreferrer"&gt;https://www.intel.com/content/www/us/en/support/articles/000005567/processors.html&lt;/a&gt;). &lt;/p&gt;

&lt;p&gt;This tool is Windows-only. Intel should have created a utility that is OS-agnostic making it something you could run from a bootable USB drive.  &lt;/p&gt;

&lt;p&gt;Having to jump through hoops to perform a test for the company's product is counterproductive.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fi8nmo13c4wbq2drnlmi9.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fi8nmo13c4wbq2drnlmi9.png" alt=" " width="800" height="762"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Stress tests like &lt;a href="https://en.wikipedia.org/wiki/Prime95" rel="noopener noreferrer"&gt;&lt;strong&gt;mprime / Prime95&lt;/strong&gt;&lt;/a&gt; didn’t expose the issue.&lt;/p&gt;

&lt;h3&gt;
  
  
  March 2025: Intel RMA Process
&lt;/h3&gt;

&lt;p&gt;Armed with the information, I hopped over to the Intel Community (&lt;a href="https://community.intel.com/" rel="noopener noreferrer"&gt;https://community.intel.com/&lt;/a&gt;) and asked about the process.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fvbeweqlvbqg7vempyykn.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fvbeweqlvbqg7vempyykn.png" alt=" " width="800" height="496"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;At &lt;a href="https://www.intel.com/content/www/us/en/support/articles/000057098/processors.html" rel="noopener noreferrer"&gt;https://www.intel.com/content/www/us/en/support/articles/000057098/processors.html&lt;/a&gt; I found all the information to start the process.&lt;/p&gt;

&lt;p&gt;You need to provide:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Processor number
&lt;/li&gt;
&lt;li&gt;ATPO
&lt;/li&gt;
&lt;li&gt;FPO
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;If you no longer have the box, you’ll need to remove the CPU and clean off the thermal paste to read the markings.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fz393i3yxqvckklfjv9p0.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fz393i3yxqvckklfjv9p0.png" alt=" " width="800" height="993"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F9xhhiaq6sv2vqyagj6ka.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F9xhhiaq6sv2vqyagj6ka.png" alt=" " width="800" height="619"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;When the Intel support agent asked me for the following additional information (from Intel's email):&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Motherboard:&lt;/strong&gt;&amp;nbsp;Please include the model and any relevant details.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Power Supply Unit (PSU):&lt;/strong&gt;&amp;nbsp;Model, wattage, and manufacturer.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Dedicated Graphics Card:&lt;/strong&gt;&amp;nbsp;Model and manufacturer, if applicable.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Thermal Solution Details (Air Cooler or a Liquid Cooler):&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Operating System Details:&lt;/strong&gt;&lt;/li&gt;
&lt;li&gt;Have you tested this processor on a different motherboard, if yes, on which motherboard was it tested?&lt;/li&gt;
&lt;li&gt;Have you tested your current motherboard with a different compatible processor, if yes, which processor have you used?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The process was excellent.&lt;/p&gt;

&lt;p&gt;I live in Malta, an island at the edge of Europe, where cross-border logistics usually take time.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Key dates:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;16 March 2025&lt;/strong&gt;: Case opened / CPU information provided / collection process initiated&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;18 March 2025&lt;/strong&gt;: DHL collected the defective CPU&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;20 March 2025&lt;/strong&gt;: Replacement CPU delivered by DHL&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  Thermal Paste
&lt;/h3&gt;

&lt;p&gt;Make sure you have thermal paste on hand. If you need to read information off the CPU (and using the machine while your case is being processed) and when you mount the new CPU on your motherboard. &lt;/p&gt;

&lt;h2&gt;
  
  
  Replacement CPU
&lt;/h2&gt;

&lt;p&gt;The replacement CPU arrived in Intel-branded packaging.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.youtube.com/shorts/wHPVQywD6t4" rel="noopener noreferrer"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  Post-Replacement: Problems Resolved
&lt;/h3&gt;

&lt;p&gt;After installing the replacement i7-13700K, &lt;strong&gt;all previously experienced problems disappeared&lt;/strong&gt;. Two months after replacing the CPU, the system returned to the rock-solid stability it had enjoyed during its first year of operation. &lt;/p&gt;




&lt;h2&gt;
  
  
  The Bigger Picture: Intel's Raptor Lake Defect
&lt;/h2&gt;

&lt;p&gt;My experience was not isolated. It was part of one of the largest CPU reliability crises in recent computing history. Earlier in my troubleshooting process, I had seen references to CPU-related problems, but:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;CPU tests passed&lt;/li&gt;
&lt;li&gt;in over 40 years I had never encountered a time-delayed CPU defect&lt;/li&gt;
&lt;/ul&gt;

&lt;h1&gt;
  
  
  What Went Wrong
&lt;/h1&gt;

&lt;p&gt;Intel's 13th Gen ("Raptor Lake") and 14th Gen ("Raptor Lake Refresh") desktop processors suffered from a fundamental defect that caused progressive, irreversible degradation. The issue affected high-performance SKUs — primarily the &lt;strong&gt;Core i5, i7, and i9 K/KF/KS variants&lt;/strong&gt; with the 8P+16E core configuration.&lt;/p&gt;

&lt;h3&gt;
  
  
  Root Cause: Vmin Shift Instability
&lt;/h3&gt;

&lt;p&gt;On 25 September 2024, Intel employee Thomas Hannaford posted the official root cause analysis on the Intel Community forums (&lt;a href="https://community.intel.com/t5/Blogs/Tech-Innovation/Client/Intel-Core-13th-and-14th-Gen-Desktop-Instability-Root-Cause/post/1633239" rel="noopener noreferrer"&gt;https://community.intel.com/t5/Blogs/Tech-Innovation/Client/Intel-Core-13th-and-14th-Gen-Desktop-Instability-Root-Cause/post/1633239&lt;/a&gt;)&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fqtj9cy4j4882g8jmphxm.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fqtj9cy4j4882g8jmphxm.png" alt=" " width="800" height="1198"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Intel localized the problem to &lt;strong&gt;a clock tree circuit within the IA core that is particularly vulnerable to reliability aging under elevated voltage and temperature&lt;/strong&gt;. These conditions lead to a duty cycle shift of the clocks, causing system instability.&lt;/p&gt;

&lt;p&gt;Intel identified &lt;strong&gt;four operating scenarios&lt;/strong&gt; that lead to Vmin shift in affected processors:&lt;/p&gt;

&lt;h4&gt;
  
  
  1. Motherboard Power Delivery Exceeding Intel Guidance
&lt;/h4&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Mitigation:&lt;/strong&gt; Intel Default Settings recommendations for 13th/14th Gen desktop processors. It is common practice for motherboards to exceed these settings and they have done so for years. It is normally set by default.&lt;/li&gt;
&lt;/ul&gt;

&lt;h4&gt;
  
  
  2. eTVB Microcode Algorithm Issue
&lt;/h4&gt;

&lt;p&gt;The Enhanced Thermal Velocity Boost algorithm was allowing i9 desktop processors to operate at higher performance states even at high temperatures.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Mitigation:&lt;/strong&gt; Microcode 0x125 (June 2024)&lt;/li&gt;
&lt;/ul&gt;

&lt;h4&gt;
  
  
  3. SVID Algorithm Requesting High Voltages
&lt;/h4&gt;

&lt;p&gt;The microcode's Serial Voltage Identification algorithm was requesting high voltages at a frequency and duration that caused Vmin shift.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Mitigation:&lt;/strong&gt; Microcode 0x129 (August 2024)&lt;/li&gt;
&lt;/ul&gt;

&lt;h4&gt;
  
  
  4. Elevated Core Voltages During Idle/Light Activity
&lt;/h4&gt;

&lt;p&gt;Microcode and BIOS code were requesting elevated core voltages especially during periods of idle and/or light activity — exactly the condition a homelab server experiences most of the time.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Mitigation:&lt;/strong&gt; Microcode 0x12B, which encompasses 0x125 and 0x129, and addresses elevated voltage requests during idle and/or light activity periods&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Intel confirmed that &lt;strong&gt;mobile processors and future product families (Lunar Lake, Arrow Lake) are unaffected&lt;/strong&gt; by the Vmin Shift Instability issue.&lt;/p&gt;

&lt;h4&gt;
  
  
  Manufacturing Oxidation (Early Units)
&lt;/h4&gt;

&lt;p&gt;For some early 13th Gen processors (manufactured in late 2022 — exactly when I purchased mine), there was an additional &lt;strong&gt;manufacturing defect involving oxidation&lt;/strong&gt;. Intel confirmed this was identified internally in late 2022 and addressed in production by early 2024, but on-shelf inventory with the defect may have persisted into early 2024.&lt;/p&gt;

&lt;h3&gt;
  
  
  The Critical Point: Damage Is Irreversible
&lt;/h3&gt;

&lt;p&gt;Once a processor has been exposed to excessive voltage for long enough, the damage to the clock tree circuit is &lt;strong&gt;permanent and cannot be repaired by any software update&lt;/strong&gt;. Microcode patches can only prevent further damage on CPUs that haven't yet degraded — they cannot restore already-damaged processors.&lt;/p&gt;

&lt;p&gt;This is why my system's stability gradually worsened over time, and why replacing the PSU only appeared to help temporarily.&lt;/p&gt;

&lt;h3&gt;
  
  
  Why My Homelab Was the Perfect Victim
&lt;/h3&gt;

&lt;p&gt;Looking at Intel's four identified scenarios, my Proxmox homelab hit the worst-case combination:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Scenario 4 (idle/light activity):&lt;/strong&gt; A homelab server spends most of its time in light-load or idle states — exactly when the faulty microcode was requesting the highest inappropriate voltages&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Scenario 3 (SVID high voltage requests):&lt;/strong&gt; The constant power-state transitions of a virtualization host (VMs starting, stopping, idling) triggered frequent SVID voltage requests&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Early manufacturing (oxidation):&lt;/strong&gt; Purchased November 2022, squarely in the window for the oxidation manufacturing defect&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Always-on operation:&lt;/strong&gt; Running 24/7 meant maximum cumulative exposure to the damaging conditions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The May 2025 microcode update (0x12F) specifically addressed "systems continuously running for multiple days with low-activity and lightly-threaded workloads" — a near-perfect description of a homelab server.&lt;/p&gt;

&lt;h3&gt;
  
  
  Intel's Response: A Timeline
&lt;/h3&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Date&lt;/th&gt;
&lt;th&gt;Action&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;Late 2023 – Early 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Community reports of instability begin accumulating&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;April 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Intel recommends motherboard manufacturers use "Intel Default Settings"&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;July 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Intel officially acknowledges elevated voltage as the cause&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;June 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Microcode &lt;strong&gt;0x125&lt;/strong&gt; released — fixes eTVB algorithm issue&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;August 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Microcode &lt;strong&gt;0x129&lt;/strong&gt; released — addresses high voltage requests&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;August 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Intel announces &lt;strong&gt;2-year warranty extension&lt;/strong&gt; (3 years → 5 years) for affected SKUs&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;September 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Intel identifies root cause (clock tree circuit / Vmin Shift)&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;September 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Microcode &lt;strong&gt;0x12B&lt;/strong&gt; released — "final" fix encompassing 0x125 + 0x129 + idle voltage control&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;October 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Intel confirms the voltage issue was the sole root cause&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;November 2024&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Class action lawsuit filed in San Jose, California&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;strong&gt;May 2025&lt;/strong&gt;&lt;/td&gt;
&lt;td&gt;Microcode &lt;strong&gt;0x12F&lt;/strong&gt; released — addresses edge cases in systems running continuously for multiple days with light workloads&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;h3&gt;
  
  
  Warranty Extension
&lt;/h3&gt;

&lt;p&gt;Intel extended the warranty from 3 years to &lt;strong&gt;5 years&lt;/strong&gt; for all affected boxed 13th/14th Gen desktop processors (&lt;a href="https://community.intel.com/t5/Mobile-and-Desktop-Processors/Additional-Warranty-Updates-on-Intel-Core-13th-14th-Gen-Desktop/m-p/1620853" rel="noopener noreferrer"&gt;https://community.intel.com/t5/Mobile-and-Desktop-Processors/Additional-Warranty-Updates-on-Intel-Core-13th-14th-Gen-Desktop/m-p/1620853&lt;/a&gt;). &lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F7xe1xgxiyvhn24hyviq8.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F7xe1xgxiyvhn24hyviq8.png" alt=" " width="800" height="884"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Key points from the announcement:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;The extension applies to &lt;strong&gt;new and previously purchased&lt;/strong&gt; processors&lt;/li&gt;
&lt;li&gt;Coverage applies to &lt;strong&gt;all customers globally&lt;/strong&gt;
&lt;/li&gt;
&lt;li&gt;The warranty eligibility period starts on the original purchase date and does not reset if Intel provides a replacement&lt;/li&gt;
&lt;li&gt;Intel committed to supporting all customers experiencing instability symptoms through the exchange process&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  Affected Processors
&lt;/h3&gt;

&lt;p&gt;The instability primarily affects desktop processors with the 8P+16E Raptor Lake silicon:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;13th Gen (Raptor Lake):&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Core i9-13900K/KF/KS&lt;/li&gt;
&lt;li&gt;Core i7-13700K/KF&lt;/li&gt;
&lt;li&gt;Core i5-13600K/KF&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;14th Gen (Raptor Lake Refresh):&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Core i9-14900K/KF/KS&lt;/li&gt;
&lt;li&gt;Core i7-14700K/KF&lt;/li&gt;
&lt;li&gt;Core i5-14600K/KF&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Lower-power variants (non-K, mobile) were less commonly affected but not entirely immune.&lt;/p&gt;




&lt;h2&gt;
  
  
  Lessons Learned
&lt;/h2&gt;

&lt;h3&gt;
  
  
  For Users Experiencing Instability
&lt;/h3&gt;

&lt;ol&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Don't assume it's software.&lt;/strong&gt; If your system was stable for months and gradually becomes unstable, hardware degradation is a real possibility — especially with Intel 13th/14th Gen CPUs.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;The symptoms are deceptive.&lt;/strong&gt; The crashes manifest as memory errors, storage corruption, split lock violations, segfaults in random binaries — anything that looks like "something else" is broken. This is because the CPU is making computation errors.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Run the Intel Processor Diagnostic Tool / equivalent.&lt;/strong&gt; Download it from &lt;a href="https://www.intel.com/content/www/us/en/support/articles/000005567/processors.html" rel="noopener noreferrer"&gt;Intel's support site&lt;/a&gt;. If your CPU fails, you have clear evidence for an RMA. Remember that a Pass is not a sign that your CPU is not impacted.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Don't waste money replacing other components first.&lt;/strong&gt; I had a perfectly good PSU to replace but didn't have spare RAM, storage and a motherboard lying about. While testing RAM and storage is reasonable, be aware that a degrading CPU can make other components &lt;em&gt;appear&lt;/em&gt; faulty.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Check your warranty status.&lt;/strong&gt; Intel extended the warranty to &lt;strong&gt;5 years&lt;/strong&gt; for affected 13th/14th Gen desktop processors. If you purchased after October 2022, you likely have coverage through at least 2027.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Update your BIOS/microcode.&lt;/strong&gt; If your CPU hasn't yet degraded, microcode 0x12B (or newer) can prevent the excessive voltage that causes damage. Check your motherboard manufacturer's website for the latest BIOS. A replacement is ultimately the best solution if you are eligible. &lt;/p&gt;&lt;/li&gt;
&lt;/ol&gt;




&lt;h2&gt;
  
  
  Conclusion
&lt;/h2&gt;

&lt;p&gt;What started as random crashes turned out to be a widespread hardware issue.&lt;/p&gt;

&lt;p&gt;The community played a critical role in identifying the root cause.&lt;/p&gt;

&lt;p&gt;People who dedicate time to maintaining forums and helping others are a key part of the ecosystem—thank you.&lt;/p&gt;

&lt;p&gt;If you're reading this because your 13th or 14th Gen Intel system is acting up take action. The fix exists, the warranty coverage is there, and Intel's replacement process works. Don't spend months chasing ghosts like I did. The clock is running out and these CPUs will eventually no longer be covered for replacement. &lt;/p&gt;

</description>
      <category>cpu</category>
      <category>hardware</category>
      <category>intel</category>
      <category>raptorlake</category>
    </item>
    <item>
      <title>The Zero-Day Exploit Clock Is Ticking</title>
      <dc:creator>Alan Bonnici</dc:creator>
      <pubDate>Thu, 04 Jun 2026 10:12:58 +0000</pubDate>
      <link>https://dev.to/chribonn/the-zero-day-exploit-clock-is-ticking-1b6d</link>
      <guid>https://dev.to/chribonn/the-zero-day-exploit-clock-is-ticking-1b6d</guid>
      <description>&lt;h2&gt;
  
  
  A Personal Introduction
&lt;/h2&gt;

&lt;p&gt;The notion of breaking into a system and making it do something its developers never intended has existed since the early days of computing. My own introduction to computing came through hacking into games — disabling or increasing the number of lives to compensate for my slow reflexes.&lt;/p&gt;

&lt;p&gt;Using TD (Turbo Debugger, from Borland — shipped alongside Turbo Assembler and Turbo C/C++), I would painstakingly try to identify the memory location that held the lives counter. Once found, one could either alter the value directly or place a NOP (No Operation) over the conditional jump. It was a task that required patience, determination, and, many times, reams of sprocketed continuous-feed paper annotated to help decipher what the code did.&lt;/p&gt;

&lt;p&gt;Discoveries were rarely kept to oneself. You shared them with others on BBSs (Bulletin Board Systems), the dial-up communities that served as gathering places for the technically curious long before the web existed.&lt;/p&gt;

&lt;p&gt;BBSs were not just a place to share results; they were a primary source of knowledge. Text files on cracking techniques, annotated memory maps for popular games, and tutorials on x86 assembly circulated freely between boards. You would dial in with a modem, download a collection of &lt;code&gt;.TXT&lt;/code&gt; and &lt;code&gt;.NFO&lt;/code&gt; files, then spend hours offline studying them. It was a decentralised, informal education system: no textbooks, no courses, just collective knowledge passed between pseudonyms.&lt;/p&gt;

&lt;p&gt;The motivation was curiosity. There was no financial incentive and no criminal intent. It was intellectual challenge for its own sake — the digital equivalent of picking a lock just to prove you could.&lt;/p&gt;

&lt;h2&gt;
  
  
  From Annoyance to Destruction
&lt;/h2&gt;

&lt;p&gt;That harmless hacking eventually evolved into something darker: worms, trojans, and viruses. Initially, these programs were little more than an annoyance, displaying messages on screen or slowing machines down. But the lever was gradually notched towards the harmful and destructive. Rather than simply popping up a message, these programs began deleting files and formatting hard drives.&lt;/p&gt;

&lt;p&gt;Early examples like the Brain virus (1986) were relatively benign; it even included the authors' names and phone number. But by the early 1990s, destructive payloads had become common. The Michelangelo virus (1992) overwrote the first hundred sectors of a hard disk. CIH/Chernobyl (1998) went further, attempting to corrupt BIOS firmware and render machines unbootable.&lt;/p&gt;

&lt;p&gt;If you are interested in watching a YouTube video of mine from 19 years ago demonstrating the operation of a destructive virus called “Casino de Malte”, head over to &lt;a href="https://youtu.be/wiLZAEMsofM" rel="noopener noreferrer"&gt;https://youtu.be/wiLZAEMsofM&lt;/a&gt;. Your hard disk’s fate was determined by the outcome of a game.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Commercialisation of Hacking
&lt;/h2&gt;

&lt;p&gt;The internet, cryptocurrency, and the dark web created an environment in which malicious actors could come together and organise themselves into profit-seeking entities. Their business model: penetrate systems, steal data, hijack operations, and then seek payment from the victim to rectify the mess they created.&lt;/p&gt;

&lt;p&gt;It proved extraordinarily lucrative. Cybercrime is now measured in the trillions. Cybersecurity Ventures estimated that global cybercrime damage would reach $10.5 trillion annually by 2025 — a figure that, if treated as an economy, would make cybercrime the third-largest in the world after the United States and China.&lt;/p&gt;

&lt;p&gt;These are not lone hackers in basements. Modern cybercriminal organisations operate with corporate structures — complete with HR departments, customer service teams to “help” victims pay ransoms, software development lifecycles, and even employee performance reviews. Groups such as LockBit and Conti have operated as Ransomware-as-a-Service (RaaS) platforms, licensing their tools to affiliates in exchange for a percentage of the ransom collected.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Ecosystem: States, Criminals, and Brokers
&lt;/h2&gt;

&lt;p&gt;Today, the malware market is made up of three distinct layers:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;State-backed groups&lt;/strong&gt; — Advanced Persistent Threat (APT) actors funded by nation-states for espionage, sabotage, and geopolitical advantage. Examples include Fancy Bear (Russia), Lazarus Group (North Korea), and APT41 (China).&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Private criminal groups&lt;/strong&gt; — Organisations that carry out penetration attacks, deploy ransomware, and operate data-theft schemes for profit.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Exploit brokers&lt;/strong&gt; — Companies and individuals that trade in hacking knowledge. Firms such as Zerodium openly advertise bounty prices for zero-day exploits: up to $2.5 million for a full Android exploit chain, for example. This grey market means that vulnerabilities are sometimes sold to the highest bidder rather than reported to the vendor for patching.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The success of these operations often depends on what are known as zero-day exploits: vulnerabilities in software that are not yet publicly known and for which no patch or mitigation exists. The term “zero-day” refers to the fact that the vendor has had zero days to fix the problem before it is exploited.&lt;/p&gt;

&lt;p&gt;To complicate matters further, some attacks require chaining together multiple exploits in a particular sequence. This is known as an exploit chain, or attack chain. For example, a modern browser exploit might chain a renderer vulnerability with a sandbox escape and a kernel privilege escalation — three separate flaws linked together to achieve full system compromise.&lt;/p&gt;

&lt;h2&gt;
  
  
  The Zero-Day Exploit Clock
&lt;/h2&gt;

&lt;p&gt;The website “Zero Day Clock” presents a striking visualisation. It analyses publicly known vulnerabilities and estimates the time between public disclosure of a vulnerability and the first confirmed exploitation in the wild.&lt;/p&gt;

&lt;p&gt;CVE gives a publicly disclosed vulnerability a common identifier, but it is only one part of the vulnerability-tracking ecosystem. CWE describes the underlying weakness, CVSS scores technical severity, EPSS estimates exploit likelihood, and CISA’s Known Exploited Vulnerabilities catalogue highlights flaws already exploited in the wild. Together, these systems help organisations decide what to fix first.&lt;/p&gt;

&lt;p&gt;Strictly speaking, once a vulnerability is publicly disclosed, it is no longer a zero-day in the narrowest sense; exploitation after disclosure is often described as n-day or one-day exploitation. But from a defender’s point of view, the practical effect is similar: the available response window is collapsing.&lt;/p&gt;

&lt;p&gt;The trend is alarming:&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fkt7rhdepdjr0xonjgeyu.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fkt7rhdepdjr0xonjgeyu.png" alt="Time-to-Exploit Milestones" width="601" height="196"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;That compression — from months to days, and potentially from days to minutes — represents a fundamental shift in the threat landscape. Defenders used to have time to test, prioritise, patch, and monitor. Increasingly, they may have only hours, minutes, or seconds.&lt;/p&gt;

&lt;h2&gt;
  
  
  The AI Accelerant
&lt;/h2&gt;

&lt;p&gt;The dramatic reduction in exploitation time is being accelerated by artificial intelligence, but AI is only one part of a wider shift. Automated scanning, exploit marketplaces, faster reverse engineering, criminal collaboration, and global infrastructure have all compressed the defender’s response window.&lt;/p&gt;

&lt;p&gt;The same AI tools that security researchers use to find flaws in code can also be weaponised by adversaries. Their systems can continuously scour vulnerability databases, security mailing lists, vendor advisories, and even social media for news of a newly disclosed weakness. Once alerted, AI-assisted tools can help to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Analyse the vulnerability&lt;/strong&gt; — parsing patch diffs to understand exactly what was fixed and, therefore, what was broken.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Generate exploit code&lt;/strong&gt; — assisting with proof-of-concept attacks targeting the flaw.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Adapt and mutate&lt;/strong&gt; — creating variants that may evade simple signature-based detection.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Scale deployment&lt;/strong&gt; — scanning the internet for unpatched systems and deploying attacks at machine speed.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;This is no longer theoretical. Academic research has shown that AI agents can exploit some real-world vulnerabilities in controlled benchmark environments. The barrier to entry has lowered: what once required deep expertise in assembly language and months of reverse engineering can now, in some cases, be partially automated.&lt;/p&gt;

&lt;p&gt;AI is also being used offensively for:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Spear-phishing at scale&lt;/strong&gt; — generating personalised, convincing emails that bypass traditional spam filters.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Deepfake social engineering&lt;/strong&gt; — cloning voices and video to impersonate executives in business email compromise (BEC) attacks.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Automated reconnaissance&lt;/strong&gt; — mapping an organisation’s attack surface faster than any human team could.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  What Can We Do?
&lt;/h2&gt;

&lt;p&gt;We cannot eliminate risk, but we can significantly reduce our exposure.&lt;/p&gt;

&lt;p&gt;For individuals:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Keep all devices updated with the latest security patches, and enable automatic updates wherever possible.&lt;/li&gt;
&lt;li&gt;Retire technology that is outdated and no longer receiving security updates. End-of-life software is an open door.&lt;/li&gt;
&lt;li&gt;Use multi-factor authentication or passkeys on every account that supports them.&lt;/li&gt;
&lt;li&gt;Be sceptical of unexpected communications, even from known contacts. Verify through a separate channel.&lt;/li&gt;
&lt;li&gt;Avoid reusing passwords. A single compromised password can become the first link in a much larger chain.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;For organisations:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Maintain a rigorous patch management programme. The window between disclosure and exploitation is shrinking towards zero. That means patching can no longer be treated as a slow administrative process. Organisations should:

&lt;ul&gt;
&lt;li&gt;Automate patch deployment where the risk profile allows it, especially for standard operating systems, browsers, endpoint software, and widely deployed services. Human approval remains important for high-impact systems, but approval workflows measured in days do not match a threat landscape measured in minutes.&lt;/li&gt;
&lt;li&gt;Prioritise vulnerabilities based on exposure, exploitability, business impact, and evidence of active exploitation. If twenty fixes are waiting, the most exposed and most exploitable systems should move first.&lt;/li&gt;
&lt;li&gt;Maintain an emergency patching route for critical vulnerabilities, with pre-agreed ownership, testing boundaries, rollback plans, and communication paths. The middle of an incident is the wrong time to decide who is allowed to approve a fix.&lt;/li&gt;
&lt;/ul&gt;


&lt;/li&gt;

&lt;li&gt;Prioritise internet-facing systems and known exploited vulnerabilities. These are the systems attackers can reach first and the weaknesses they are most likely to weaponise quickly.&lt;/li&gt;

&lt;li&gt;Adopt a zero-trust architecture: assume breach and verify every access request.&lt;/li&gt;

&lt;li&gt;Invest in defensive tools that can detect, prioritise, and respond at machine speed. Alerts alone are not enough; the goal should be rapid triage, containment, and recovery.&lt;/li&gt;

&lt;li&gt;Conduct regular penetration testing and red-team exercises. These should test not only whether vulnerabilities exist, but whether the organisation can detect, escalate, and respond to them quickly.&lt;/li&gt;

&lt;li&gt;Ensure robust, tested backup and recovery procedures. Ransomware is only effective if you have no viable alternative.&lt;/li&gt;

&lt;/ul&gt;

&lt;p&gt;The uncomfortable truth is that vigilance alone is no longer sufficient. When exploitation timelines compress to minutes, human reaction time becomes the bottleneck. Organisations need automated detection, prioritisation, containment, and recovery capabilities that can operate at the same speed as the attacks they face.&lt;/p&gt;

&lt;p&gt;We must also recognise that each of us can be one link in an exploit chain. A compromised personal device, a reused password, an unpatched home router — any of these can become the entry point that leads to a larger organisational breach.&lt;/p&gt;

&lt;h2&gt;
  
  
  Closing Thought
&lt;/h2&gt;

&lt;p&gt;In three decades, hacking has evolved from teenagers on BBSs trading game cheats into a global criminal industry: commercialised, professionalised, backed by nation-states, and now accelerated by artificial intelligence.&lt;/p&gt;

&lt;p&gt;The zero-day exploit clock is ticking faster than ever. For individuals, that means patching, retiring obsolete technology, using passkeys or multi-factor authentication, and treating unexpected communication with caution. For organisations, it means accepting that manual response is no longer enough.&lt;/p&gt;

&lt;p&gt;The question is no longer whether an attack will come, but whether our defences can respond in the seconds we may have left.&lt;/p&gt;

&lt;h2&gt;
  
  
  Suggested references
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;Zero Day Clock: &lt;a href="https://zerodayclock.com/" rel="noopener noreferrer"&gt;https://zerodayclock.com/&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Cybersecurity Ventures, 2025 Official Cybercrime Report: &lt;a href="https://cybersecurityventures.com/official-cybercrime-report-2025/" rel="noopener noreferrer"&gt;https://cybersecurityventures.com/official-cybercrime-report-2025/&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;CVE-Bench: &lt;a href="https://arxiv.org/html/2503.17332v3" rel="noopener noreferrer"&gt;https://arxiv.org/html/2503.17332v3&lt;/a&gt;
&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>cybersecurity</category>
      <category>infosec</category>
      <category>privacy</category>
      <category>ai</category>
    </item>
    <item>
      <title>"Complexity Ceiling" in Power Apps</title>
      <dc:creator>Alan Bonnici</dc:creator>
      <pubDate>Wed, 20 May 2026 08:25:55 +0000</pubDate>
      <link>https://dev.to/chribonn/complexity-ceiling-in-power-apps-21fg</link>
      <guid>https://dev.to/chribonn/complexity-ceiling-in-power-apps-21fg</guid>
      <description>&lt;p&gt;Power Apps is a powerhouse for rapid prototyping within the Microsoft ecosystem, but for complex development, the "seams" are becoming visible. This new analysis explores the "Complexity Ceiling" and the friction points faced by architects and developers.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Core Issues Identified:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Mental Model Mismatch&lt;/strong&gt;: Chaining nested &lt;code&gt;With&lt;/code&gt; blocks to simulate sequential logic.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Tooling Gaps&lt;/strong&gt;: The need for real breakpoints and execution narratives over simple trace functions.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Governance Hurdles&lt;/strong&gt;: The "abrupt cliff" of enterprise compliance for makers.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Microsoft has the opportunity to bridge the gap between business analysts and professional engineers by introducing controlled imperative constructs and better code organization.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.alanbonnici.com/2026/05/the-complexity-ceiling-where-microsoft.html" rel="noopener noreferrer"&gt;https://www.alanbonnici.com/2026/05/the-complexity-ceiling-where-microsoft.html&lt;/a&gt;&lt;/p&gt;

</description>
      <category>powerapps</category>
      <category>powerplatform</category>
      <category>lowcode</category>
      <category>microsoft</category>
    </item>
    <item>
      <title>Does your Linux server actually know when the power is failing?</title>
      <dc:creator>Alan Bonnici</dc:creator>
      <pubDate>Thu, 19 Mar 2026 11:39:08 +0000</pubDate>
      <link>https://dev.to/chribonn/does-your-linux-server-actually-know-when-the-power-is-failing-48ag</link>
      <guid>https://dev.to/chribonn/does-your-linux-server-actually-know-when-the-power-is-failing-48ag</guid>
      <description>&lt;p&gt;NUT (Network UPS Tools) is the go-to open-source solution for UPS monitoring on Linux — but it takes some know-how to set up properly, especially with hardware that isn't auto-detected out of the box.&lt;/p&gt;

&lt;p&gt;This detailed guide covers everything from finding the right driver, dealing with stubborn read-only settings, configuring automatic shutdowns, and setting up email alerts so you know when things go wrong. There's even a section on how to safely test your shutdown logic before a real power cut hits.&lt;/p&gt;

&lt;p&gt;Great resource for anyone running a homelab or Linux-based home server. 👇&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.alanbonnici.com/2026/03/setting-up-nut-ups-software-on-linux.html" rel="noopener noreferrer"&gt;https://www.alanbonnici.com/2026/03/setting-up-nut-ups-software-on-linux.html&lt;/a&gt;&lt;/p&gt;

</description>
      <category>nut</category>
      <category>linux</category>
      <category>ups</category>
      <category>homelab</category>
    </item>
    <item>
      <title>How to configure Postfix to relay mail through Gmail (simple step-by-step guide)</title>
      <dc:creator>Alan Bonnici</dc:creator>
      <pubDate>Tue, 17 Mar 2026 10:31:07 +0000</pubDate>
      <link>https://dev.to/chribonn/how-to-configure-postfix-to-relay-mail-through-gmail-simple-step-by-step-guide-2hmp</link>
      <guid>https://dev.to/chribonn/how-to-configure-postfix-to-relay-mail-through-gmail-simple-step-by-step-guide-2hmp</guid>
      <description>&lt;p&gt;If you run Linux servers that need to send alerts, backup reports, or monitoring notifications, configuring SMTP can be a pain.&lt;/p&gt;

&lt;p&gt;I wrote a short guide explaining how to install and configure &lt;strong&gt;Postfix with Gmail as an SMTP relay&lt;/strong&gt;, including:&lt;/p&gt;

&lt;p&gt;• Installing required packages&lt;br&gt;&lt;br&gt;
• Configuring TLS&lt;br&gt;&lt;br&gt;
• Setting up Gmail app passwords&lt;br&gt;&lt;br&gt;
• Securing credentials&lt;br&gt;&lt;br&gt;
• Testing email delivery&lt;/p&gt;

&lt;p&gt;Good for small servers, homelabs, monitoring tools, and UPS notifications.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://www.alanbonnici.com/2026/03/install-and-configure-postfix-using.html" rel="noopener noreferrer"&gt;https://www.alanbonnici.com/2026/03/install-and-configure-postfix-using.html&lt;/a&gt;&lt;/p&gt;

</description>
      <category>linux</category>
      <category>postfix</category>
      <category>smtp</category>
      <category>tutorial</category>
    </item>
    <item>
      <title>Building a Production RAG Server with Ollama, Open WebUI and Chroma DB</title>
      <dc:creator>Alan Bonnici</dc:creator>
      <pubDate>Wed, 11 Feb 2026 08:48:39 +0000</pubDate>
      <link>https://dev.to/chribonn/building-a-production-rag-server-with-ollama-open-webui-and-chroma-db-3h3o</link>
      <guid>https://dev.to/chribonn/building-a-production-rag-server-with-ollama-open-webui-and-chroma-db-3h3o</guid>
      <description>&lt;p&gt;I've created a comprehensive guide on building a headless LLM server with RAG capabilities. The tutorial walks through the complete implementation including document ingestion, vector storage, and query optimization.&lt;/p&gt;

&lt;p&gt;The setup is production-ready and can be completed in about 30 minutes. &lt;/p&gt;

&lt;p&gt;There are optional code sections for those who would like to interact with the model programmatically.&lt;/p&gt;

</description>
      <category>llm</category>
      <category>rag</category>
      <category>ai</category>
      <category>tutorial</category>
    </item>
    <item>
      <title>MS PowerApps Wordle Engine HowTo</title>
      <dc:creator>Alan Bonnici</dc:creator>
      <pubDate>Wed, 29 Jan 2025 14:05:24 +0000</pubDate>
      <link>https://dev.to/chribonn/ms-powerapps-wordle-engine-howto-452n</link>
      <guid>https://dev.to/chribonn/ms-powerapps-wordle-engine-howto-452n</guid>
      <description>&lt;p&gt;In this HowTo, I dive into creating a Microsoft Power Apps Canvas Wordle app that checks a guessed word against an answer!&lt;/p&gt;

&lt;p&gt;🔍 Features include:&lt;br&gt;&lt;br&gt;
✅ Duplicate detection&lt;br&gt;&lt;br&gt;
✅ Suggestions for improvement&lt;br&gt;&lt;br&gt;
✅ Tips for enhancing Power Apps to bridge the gap between no-code/low-code and procedural approaches!&lt;/p&gt;

&lt;p&gt;&lt;a href="https://youtu.be/-cz_lun6fo0?si=COXVB5vb2rXboyka" rel="noopener noreferrer"&gt;https://youtu.be/-cz_lun6fo0?si=COXVB5vb2rXboyka&lt;/a&gt;&lt;/p&gt;

</description>
      <category>powerapps</category>
      <category>howto</category>
      <category>lowcode</category>
      <category>nocode</category>
    </item>
  </channel>
</rss>
