Blog

Notes from the ops room.

Hosting, infrastructure, development, and SEO — written by the people doing the work.

Latest Aug 15, 2026 Security

Lazarus Had Your Windows Kernel for 5 Weeks — Patch Tuesday Fixed It

Microsoft's August Patch Tuesday patches 398 CVEs including a WinSock zero-day North Korea's Lazarus Group exploited for five weeks before disclosure — and a CVSS 9.8 DNS Server flaw Microsoft calls potentially wormable.

Read article

Aug 14, 2026 Artificial Intelligence

Gemini 3.7 Flash: Google's Biggest Coding Leap Yet, at Half the Price

Google dropped Gemini 3.7 Flash on August 13 — its third Flash model in roughly three months — with benchmark gains that...

Read article

Aug 13, 2026 WordPress

WordPress 7.0.4 Fixes CVE-2026-65640: When an Image Upload Becomes a Shell

WordPress 7.0.4 landed August 12 with a fix for CVE-2026-65640 — a CVSS 8.8 flaw that turns a routine media upload into...

Read article

Aug 12, 2026 Security

FBI Joint Advisory: Gunra Ransomware Is Still Getting In Through Fortinet Firewalls Patched 18 Months Ago

A new FBI, CISA, NSA, and South Korea joint advisory confirms Gunra ransomware operators have hit 51 hospitals, governme...

Read article

Notes from the ops room.

Lazarus Had Your Windows Kernel for 5 Weeks — Patch Tuesday Fixed It

More articles

Gemini 3.7 Flash: Google's Biggest Coding Leap Yet, at Half the Price

WordPress 7.0.4 Fixes CVE-2026-65640: When an Image Upload Becomes a Shell

FBI Joint Advisory: Gunra Ransomware Is Still Getting In Through Fortinet Firewalls Patched 18 Months Ago

More from the blog

Meta Muse Glimmer: A 30B Open-Weight Agent That Runs Offline on One GPU

BdThemes Elementor Plugins Backdoored via Poisoned API — Check Your Site Now

KindaRails2Shell: The Image Upload That Hands Attackers Your Server (CVE-2026-66066)

XSS2Shell: WordPress Login Screen XSS Chains to PHP Code Execution

EU AI Act Article 50 Is Live — Your AI Chatbot Needs a Disclosure Now

CVE-2026-9198: Langflow's CVSS 9.8 RCE Is Already Being Exploited

CVSS 10 SonicWall VPN Flaw Now Weaponized by INC Ransomware

CVE-2026-18577: Auth Bypass in N-central Puts Every MSP Client at Risk

ARVE WordPress Plugin Backdoored via Supply Chain Attack: CVE-2026-18072

DeepSeek V4 Flash 0731: How Better Training Beat a Bigger Model