Fantastic Friday: Dirty Snow, The Digital Vault & The Advanced Malware Threat

Fresh hardware, new tools, and "Dirty Snow"—it's been a busy week at the Core Lab.

Happy Friday, Core Lab crew!

It has been a marathon few weeks here at the lab. I've been tearing down old infrastructure, building new monsters, and completely rewriting the tools you use to plan your own labs. If you’ve been AFK for the holidays, here is the "TL;DR" of what’s new on the site—and why you might want to check your Docker containerstoday.

🛠️ The Lab Updates (The Fun Stuff!)😃

We kicked off 2026 with a massive hardware refresh and some major guide overhauls.

1. The "Dirty Snow" Build (Ryzen 9800X3D)🙌

I finally retired my old Ryzen 5800X and built a new hybrid workstation I'm calling "Dirty Snow." It’s a Black & White build designed to bridge the gap between high-end gaming and local virtualization.

The Brains: Ryzen 7 9800X3D (The gaming king).
The OS: CachyOS (Arch Linux) for that BORE scheduler magic.
The Verdict: It runs cooler than my old 5800X while delivering nearly double the performance.

Read the Full Build Log

2. The Digital Vault (Vaultwarden)

On Jan 7th, I dropped an important (in my opinion) guide on Self-Hosting Vaultwarden (Bitwarden). Stop trusting LastPass or 1Password with your keys to the kingdom. We walk through setting it up with Docker, securing it behind a reverse proxy, and why "owning your data" is the only real security policy.

Enter the Digital Vault

3. Guide Overhauls & Quick New Posts! 🔖

OPNsense Part 1 Remastered: The ultimate firewall guide has been updated for 2026 hardware (HELLO Ryzen Mini-PC CPUs!) and includes clearer steps to avoid locking yourself out and a much better initial ruleset.
Hacking Ghost CMS: A quick guide on adding mobile-friendly breadcrumbs to your Ghost theme because default navigation is terrible on phones.
Cloudflare Tunnels: We answered the big question: Are they actually safe? (Spoiler: Yes, but only if you lock them down correctly!).
Cord Cutting for Canadians: Overhauled and updated new for 2026, with added hardware choices, and a revamped feature:
- Cord Cutter ROI v4: Updated with Canadian (CAD) pricing, new device options, and a better breakdown of "Old vs New" costs.

Cyberpunk mascot looking concerned at a red holographic shield warning icon. She sits among snowy server racks, signaling a cybersecurity alert. — *The threat landscape doesn't take snow days. VoidLink and new breaches are in the wild.*

💀 The Threat Landscape (The Gloomy Stuff)

Okay, fun’s over. Put on your tinfoil hats. The last 72 hours have been... active.

🚨 New Threat: VoidLink (Linux Malware)

If you run Docker containers (which is basically all of us), pay attention. Researchers at Check Point just dropped a report on VoidLink, a new malware framework coming out of China.

What is it? Think "Cobalt Strike" but specifically for Linux Cloud/Container environments.
Why it’s scary: It’s "Cloud Native." It can detect if it's running inside Docker or Kubernetes, cloak itself to look like a legitimate process, and then use a modular plugin system to pivot through your network.
The Takeaway: If you are exposed to the internet or running unpatched containers, you are the target. Lock down your ports.

Source:

📸 17.5 Million Instagram Records Leaked

A massive database containing 17.5 million Instagram user records (Emails, Phone Numbers, Real Names) was dumped on the dark web this week.

The Good News: No passwords were in the dump.
The Bad News: Expect a tsunami of "Reset Your Password" phishing emails. If you get an email from "Instagram" this weekend, do not click it. Go to the app directly.

🤡 BreachForums Gets Breached (Again)

In a moment of poetic justice, the database for BreachForums (the place where hackers sell stolen data) was leaked. 324,000 user accounts from the hacking forum are now public. It’s always nice when the bad guys dox themselves.

Weekend Project?

If you haven't read the Vaultwarden Guide yet, or don't have a password manager yet, make that your mission. With 17.5 million Instagram emails floating around, now is a great time to rotate your passwords and get them onto a server you control.

Coming soon -

The "Fake" Gen 5 Storage Review: I tested the Samsung 990 EVO Plus on Linux. It claims to be PCIe 5.0, but isn't. Is it a scam? Actually, for a silent Linux build, it might be the best drive on the market.
I had to upgrade my network, to keep up with my new workstation!