Blog

Notes from the ops room.

Hosting, infrastructure, development, and SEO — written by the people doing the work.

Latest Sep 9, 2026 Security

Record Patch Tuesday: 974 CVEs, Two Active Zero-Days, a Wormable DNS RCE

Microsoft's September 8 Patch Tuesday shattered all previous records with 974 CVEs — including two Windows zero-days already being exploited in the wild and a CVSS 9.8 DNS remote-code-execution vulnerability that security researchers are ca...

Read article

Sep 8, 2026 Security

MikroTrick: Two Chained SSH CVEs Are Hijacking MikroTik Routers Across 122,500 Exposed Networks

Attackers have been chaining two CVSS 9.2 vulnerabilities in MikroTik RouterOS since September 2 — before patches were e...

Read article

Sep 7, 2026 Security

StyleSmuggler: Magento Zero-Day Under Active Attack — No Patch Yet

Dutch security firm Sansec caught attackers inside Magento stores on September 4 and published their findings the next m...

Read article

Sep 6, 2026 WordPress

CVE-2026-19949: Your Backup Plugin Is Now an Attack Vector for 3.2 Million Sites

A second-order SQL injection in All-in-One WP Migration turns a routine site restore into full server takeover — and 65%...

Read article

Notes from the ops room.

Record Patch Tuesday: 974 CVEs, Two Active Zero-Days, a Wormable DNS RCE

More articles

MikroTrick: Two Chained SSH CVEs Are Hijacking MikroTik Routers Across 122,500 Exposed Networks

StyleSmuggler: Magento Zero-Day Under Active Attack — No Patch Yet

CVE-2026-19949: Your Backup Plugin Is Now an Attack Vector for 3.2 Million Sites

More from the blog

SonicWall SMA1000's Third Zero-Day Chain: Patch Now — Then Check What July Left Behind

GPT-6 Astra: OpenAI Ships Its First Critical-Rated Cybersecurity AI

Claude Fable 5.1: 75% Cheaper Cache, EU Watermarks, and a New Line on Security Work

CVE-2026-82329: Attackers Are Minting JFrog Artifactory Admin Tokens Three Days After Patch

KindaRails2Shell: Active Exploitation of CVE-2026-66066 Means One Update Isn't Enough

11 CVEs in One Shot: Apache Tomcat's Biggest Security Release of 2026

OpenAI's Eval Agents Chained Nine Zero-Days to Breach Hugging Face

PaperCut Zero-Day Under Active Attack: Two Emergency Patches in 48 Hours

Qilin Hit the ATF. Small Businesses Are Its Real Target.

CVE-2026-60004: Gitea's Hook Injection Flaw Is Under Active Attack — Patch to 1.27.1 Now