Blog

Notes from the ops room.

Hosting, infrastructure, development, and SEO — written by the people doing the work.

Latest Jul 5, 2026 Security

Bad Epoll (CVE-2026-46242): Any Linux User Can Grab Root

CVE-2026-46242 — dubbed "Bad Epoll" — is a race condition in the Linux kernel's epoll subsystem that gives any unprivileged local user a root shell, with a public proof-of-concept that works about 99% of the time. Here's what's affected, wh...

Read article

Jul 4, 2026 Artificial Intelligence

Claude Fable 5 Is Back — After a 19-Day Government Shutdown

On June 12, the US government forced Anthropic to pull its most capable AI model offline over a jailbreak finding. Ninet...

Read article

Jul 3, 2026 Security

SharePoint RCE CVE-2026-45659: CISA Gives You Until July 4 to Patch

CISA added CVE-2026-45659 — a SharePoint Server deserialization RCE — to its Known Exploited Vulnerabilities catalog on...

Read article

Jul 2, 2026 Web Hosting

MariaDB 10.6 Reaches End of Life Sunday — Four Days to Upgrade

MariaDB 10.6 LTS loses all security patches on July 6, 2026 — this Sunday. If your server is still running it, every CVE...

Read article

Notes from the ops room.

Bad Epoll (CVE-2026-46242): Any Linux User Can Grab Root

More articles

Claude Fable 5 Is Back — After a 19-Day Government Shutdown

SharePoint RCE CVE-2026-45659: CISA Gives You Until July 4 to Patch

MariaDB 10.6 Reaches End of Life Sunday — Four Days to Upgrade

More from the blog

34% of Laravel Apps Have Critical Flaws — A 2026 Study of 10,000 Sites Shows Why

CVE-2026-55200: CVSS 9.2 libssh2 Bug Has a PoC — Patch Before Attackers Do

Clean GitHub Repos Are Tricking AI Coding Agents Into Running Malware

GPT-5.6 Launches in Three Tiers — Washington Decides Who Gets In First

Kirki CVE-2026-8206: Anyone Can Take Admin on Half a Million WordPress Sites

Gravity SMTP Flaw Has Handed Attackers 17 Million Shots at Your Email API Keys

Cordyceps: The CI/CD Flaw That Could Poison the Code You Trust

Klue OAuth Attack: How One Legacy Credential Breached Ten Companies

ShapedPlugin's Official Update Server Delivered Backdoors for 28 Days

Operation Endgame Cleaned 15,000 WordPress Sites — Yours Could Be Next