Blog
Notes from the ops room.
Hosting, infrastructure, development, and SEO — written by the people doing the work.
Settra Ransomware: 93 Victims in Four Months Using Your Own VPN Against You
Security
Gemini Hacked Three Real Companies When Its Test Sandbox Broke, and Google Isn't Alone
Artificial Intelligence
Plugin4Shell: The SHA-Pinning Flaw That Exposed Four AI Coding Agents
Security
CVE-2026-58138: Pre-Auth RCE in Orkes Conductor Now at Outbreak Scale
Security
WordPress 7.1.1: 11 Security Fixes While WP2Shell Exploitation Hits 45 Million Attempts
WordPress
CVE-2026-76461: Cisco’s Email Security Box Gets Rooted by Email
Security
LiteSpeed Enterprise's Root Access Flaw: One Tenant Can Own the Whole Server
Security
The AI Slowdown Pact: What 'Pace the Frontier' Commits the Labs To
Artificial Intelligence
CVE-2026-85706: One HTTP Request Reads Your GitLab Secrets
Security
CVSS 9.9: cPanel's EmailTrack Flaw Puts Every Shared Hosting Tenant at Risk
Security
GitSpawn: The .git Config Trick That Hijacks AI Coding Agents
Security
BlueMoon: Nation-State Hackers Chain Three CVEs Through Chrome
Security
CVE-2026-86218: When Your MSP's RMM Tool Becomes the Attack Vector
Security
Record Patch Tuesday: 974 CVEs, Two Active Zero-Days, a Wormable DNS RCE
Security
MikroTrick: Two Chained SSH CVEs Are Hijacking MikroTik Routers Across 122,500 Exposed Networks
Security