How do I access the REST API documentation for Tenable Nessus (Essentials/Professional/Expert)?

It’s almost like Tenable is trying to hide the documentation, almost every link on the Internet takes you to their documentation for the Tenable Cloud service!  Either way to get to the REST API documentation go to /api path, if your server was at https://scanner.myworldofit.net:8443 you’d go to https://scanner.myworldofit.net:8443/api. Of note you can go to /api#/resources/session/create to enter the username/password… Read more

Palo Alto Networks NGFW fails to install AV or Wildfire updates even though Apps & Threats are up-to-date

On a firewall that’s been upgraded from the ‘non Advanced’ licences to the ‘Advanced’ licences and where the ‘non Advanced’ licences now show as expired in the licences page you may encounter the following message when trying to manually install Wildfire updates: Failed to update content with following message: rootdir changed to /opt/pancfg/mgmt/wf_ramdisk/wf_tmp No wildfire update is applied. No valid… Read more

Lenovo X1 Nano Gen 1 rapid battery drain, turns out it was just battery calibration

For the last 5 years I’ve been using a Lenovo X1 Nano Gen 1 laptop without much issue; however, recently the battery seems to drain super quickly (100% to 10% in less than an hour) with a worry that maybe I had a faulty/failing battery. After a busy day away from a charger and noticing that the battery was sitting… Read more

Palo Alto Networks Decryption – Azure CLI won’t connect ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier’

It looks like the more recent releases of Azure CLI are running off Python versions that enforce ‘Authority Key Identifier’ checks of the security certificates when connecting to Azure CLI (az login). You might see an error message similar to the below if bumping into this issue. HTTPSConnectionPool(host=’login.microsoftonline.com’, port=443): Max retries exceeded with url: /organizations/v2.0/.well-known/openid-configuration (Caused by SSLError(SSLCertVerificationError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED]… Read more

CITC 2026 Protecting High Risk Accounts with Strong (Phishing Resistant) Authentication

CITC is back for 2026 and this year I’m talking about how trivial it is to compromise identities and how to prevent it with phishing resistant authentication. Please see below the video presentation. Reference article links: The Register – Lock down Microsoft Intune, feds warn after Stryker attack – https://www.theregister.com/2026/03/19/microsoft_intune_lockdown_stryker/ The Register – 1K+ cloud environments infected following Trivy supply… Read more

Panorama PAN-OS 12.1 upgrade fails, ‘no enough disk space to hold image’

In getting ready to move Panorama to PAN-OS 12.1 from 11.1 (to manage some new PA-5×0 series firewalls) if you haven’t already performed the ‘224GB’ disk size increase you are likely to bump into this error message: Successfully downloaded Software version: 12.1.2 Preloading into software manager Failed to create required free space. Free space: 3191 MB, Required space: 3717 MB… Read more

Processing Active Directory timestamps in Node-RED

I recently had a need to process Active Directory timestamps in Node-RED (based on the output from LDAP) to work out if a specific action should be carried out on a user or not. Microsoft is a bit weird (Microsoft) here where ‘the value is stored as a large integer that represents the number of 100-nanosecond intervals since January 1,… Read more

Connect-SPOService with a YubiKey

When connecting to SharePoint using PowerShell the default authentication prompt does not permit the use of hardware security keys (such as YubiKeys or the Security Key by Yubico), to get around this limitation use the -UseSystemBrowser $true parameter at the end of the connection command. Reference example 6 (at time of publication) at: https://learn.microsoft.com/en-us/powershell/module/microsoft.online.sharepoint.powershell/connect-sposervice?view=sharepoint-ps#example-6

Renewing a SubCA, the CA just restarts the service without prompting to save the request

An interesting problem solved by a simple solution. When renewing the SubCA certificate for an Active Directory Certificate Authority and clicking through the ‘Renew CA Certificate…’ prompt after being asked if you want to keep the current private key or not the CA service simply restarts without displaying the usual CA Certificate Request prompt (as above). The solution – a… Read more

Palo Alto Networks NGFW does not respond to ping from HPE Procurve/Aruba switches

Another unexpected Zone Protection Profile doing it’s thing – in this case sending a ping from an end-user device (such as Windows/macOS computer) to an IP interface (gateway) on a Palo Alto Networks Next Generation Firewall was coming back with a response, but requests from HPE ProCurve (Aruba) switches (2920/2530) appeared to disappear into oblivion with no response. A little… Read more