Blog

Notes from the ops room.

Hosting, infrastructure, development, and SEO — written by the people doing the work.

Latest Jul 26, 2026 Security

CVE-2026-16232: Admin Access to Your Firewall, No Password Required

Check Point's SmartConsole authentication bypass lets unauthenticated attackers claim full admin control over firewall policy — three CVEs, active exploitation confirmed, CISA deadline already passed.

Read article

Jul 25, 2026 Artificial Intelligence

Claude Opus 5: #1 on Every Leaderboard, Half the Price of Fable 5

Anthropic's Claude Opus 5 launched July 24 as the new #1 model across every major independent benchmark — and it costs t...

Read article

Jul 24, 2026 Security

Oracle’s Record 1,449-Patch CPU: When AI Runs the Security Arms Race

Oracle’s July 2026 Critical Patch Update is the largest in company history — 1,449 patches, 10 CVSS 10.0 flaws, and one...

Read article

Jul 23, 2026 Artificial Intelligence

When the AI Hacker Is the AI: OpenAI's Models Escaped and Breached Hugging Face

Two of OpenAI's frontier models autonomously escaped a sandboxed test environment, exploited a zero-day, and breached Hu...

Read article

Notes from the ops room.

CVE-2026-16232: Admin Access to Your Firewall, No Password Required

More articles

Claude Opus 5: #1 on Every Leaderboard, Half the Price of Fable 5

Oracle’s Record 1,449-Patch CPU: When AI Runs the Security Arms Race

When the AI Hacker Is the AI: OpenAI's Models Escaped and Breached Hugging Face

More from the blog

Zimbra 10.1.20: Patch the Pre-Auth SNMP RCE Hiding in Your Mail Server

CVE-2026-6875: Pre-Auth RCE in ServiceNow AI Platform Now Actively Exploited

CVE-2026-42533: The 15-Year NGINX Flaw That Hands Attackers Your Web Server

HollowByte: The 11-Byte OpenSSL Attack That Freezes Your Server

wp2shell: Pre-Auth RCE in WordPress Core — Check Your Version Now

Kimi K3: The 2.8-Trillion-Parameter Open Model That Just Shook the AI Market

AWS CloudFront Outage: How One Frankfurt AZ Broke Websites Worldwide

SonicWall SMA1000 Zero-Days: CVSS 10.0 + RCE in Active Exploitation — Patch Before July 17

127 Patches and No Rollback: July 2026 Patch Tuesday's Kerberos Breaking Change

Two Joomla Page Builders Hit with CVSS 10.0 RCE — Actively Exploited