Blog
Notes from the ops room.
Hosting, infrastructure, development, and SEO — written by the people doing the work.
Lazarus Had Your Windows Kernel for 5 Weeks — Patch Tuesday Fixed It
Security
Gemini 3.7 Flash: Google's Biggest Coding Leap Yet, at Half the Price
Artificial Intelligence
WordPress 7.0.4 Fixes CVE-2026-65640: When an Image Upload Becomes a Shell
WordPress
FBI Joint Advisory: Gunra Ransomware Is Still Getting In Through Fortinet Firewalls Patched 18 Months Ago
Security
Meta Muse Glimmer: A 30B Open-Weight Agent That Runs Offline on One GPU
Artificial Intelligence
BdThemes Elementor Plugins Backdoored via Poisoned API — Check Your Site Now
WordPress
KindaRails2Shell: The Image Upload That Hands Attackers Your Server (CVE-2026-66066)
Security
XSS2Shell: WordPress Login Screen XSS Chains to PHP Code Execution
WordPress
EU AI Act Article 50 Is Live — Your AI Chatbot Needs a Disclosure Now
Artificial Intelligence
CVE-2026-9198: Langflow's CVSS 9.8 RCE Is Already Being Exploited
Security
CVSS 10 SonicWall VPN Flaw Now Weaponized by INC Ransomware
Security
CVE-2026-18577: Auth Bypass in N-central Puts Every MSP Client at Risk
Security
ARVE WordPress Plugin Backdoored via Supply Chain Attack: CVE-2026-18072
WordPress
DeepSeek V4 Flash 0731: How Better Training Beat a Bigger Model
Artificial Intelligence
Proxmox VE 8 Reaches End of Life August 31 — Start Your Upgrade Now
VPS & Cloud