Blog
Notes from the ops room.
Hosting, infrastructure, development, and SEO — written by the people doing the work.
wp2shell: The WordPress Core RCE Chain Still Active 5 Weeks Later
WordPress
CVE-2026-73570: Zimbra's SNMP Flaw Is Under Active Attack — 270 Servers Compromised and Counting
Security
When the AI Ran the Hack: Claude Code Inside a Live Ransomware Campaign
Security
Citrix NetScaler's Double Trouble: Active RCE Exploitation Meets a Fresh CVSS 9.3 Auth Bypass
Security
CVE-2026-32475: Elementor Pro's File Upload Flaw Hands Attackers Your Server
WordPress
CVE-2026-19478: GitLab's GraphQL Flaw Lets Anyone Wipe Your Repos
Security
Eight Hours Dark: GitHub's Global Outage Consumed a Year of Downtime Budget in One Day
Industry News
CVE-2026-15748: Forminator's CVSS 9.8 Flaw Puts 600,000 WordPress Sites at Risk
WordPress
VMware vCenter RCE: Five Days from Patch to 361 Compromised Servers
Security
Namecheap's 30-Hour Outage: When Your Host Takes Your DNS Down With It
Web Hosting
Lazarus Had Your Windows Kernel for 5 Weeks — Patch Tuesday Fixed It
Security
Gemini 3.7 Flash: Google's Biggest Coding Leap Yet, at Half the Price
Artificial Intelligence
WordPress 7.0.4 Fixes CVE-2026-65640: When an Image Upload Becomes a Shell
WordPress
FBI Joint Advisory: Gunra Ransomware Is Still Getting In Through Fortinet Firewalls Patched 18 Months Ago
Security
Meta Muse Glimmer: A 30B Open-Weight Agent That Runs Offline on One GPU
Artificial Intelligence