Blog

Notes from the ops room.

Hosting, infrastructure, development, and SEO — written by the people doing the work.

Latest Jul 27, 2026 Security

Public Exploit Drops for GitLab RCE Buried in a 'Bug Fix'

A working exploit for an authenticated RCE flaw in self-managed GitLab was published July 24 — targeting a vulnerability patched six weeks earlier without a CVE or security advisory. If you run GitLab CE/EE and have not updated since June 1...

Read article

Jul 26, 2026 Security

CVE-2026-16232: Admin Access to Your Firewall, No Password Required

Check Point's SmartConsole authentication bypass lets unauthenticated attackers claim full admin control over firewall p...

Read article

Jul 25, 2026 Artificial Intelligence

Claude Opus 5: #1 on Every Leaderboard, Half the Price of Fable 5

Anthropic's Claude Opus 5 launched July 24 as the new #1 model across every major independent benchmark — and it costs t...

Read article

Jul 24, 2026 Security

Oracle’s Record 1,449-Patch CPU: When AI Runs the Security Arms Race

Oracle’s July 2026 Critical Patch Update is the largest in company history — 1,449 patches, 10 CVSS 10.0 flaws, and one...

Read article

Notes from the ops room.

Public Exploit Drops for GitLab RCE Buried in a 'Bug Fix'

More articles

CVE-2026-16232: Admin Access to Your Firewall, No Password Required

Claude Opus 5: #1 on Every Leaderboard, Half the Price of Fable 5

Oracle’s Record 1,449-Patch CPU: When AI Runs the Security Arms Race

More from the blog

When the AI Hacker Is the AI: OpenAI's Models Escaped and Breached Hugging Face

Zimbra 10.1.20: Patch the Pre-Auth SNMP RCE Hiding in Your Mail Server

CVE-2026-6875: Pre-Auth RCE in ServiceNow AI Platform Now Actively Exploited

CVE-2026-42533: The 15-Year NGINX Flaw That Hands Attackers Your Web Server

HollowByte: The 11-Byte OpenSSL Attack That Freezes Your Server

wp2shell: Pre-Auth RCE in WordPress Core — Check Your Version Now

Kimi K3: The 2.8-Trillion-Parameter Open Model That Just Shook the AI Market

AWS CloudFront Outage: How One Frankfurt AZ Broke Websites Worldwide

SonicWall SMA1000 Zero-Days: CVSS 10.0 + RCE in Active Exploitation — Patch Before July 17

127 Patches and No Rollback: July 2026 Patch Tuesday's Kerberos Breaking Change