Blog
Notes from the ops room.
Hosting, infrastructure, development, and SEO — written by the people doing the work.
Eight Hours Dark: GitHub's Global Outage Consumed a Year of Downtime Budget in One Day
Industry News
CVE-2026-15748: Forminator's CVSS 9.8 Flaw Puts 600,000 WordPress Sites at Risk
WordPress
VMware vCenter RCE: Five Days from Patch to 361 Compromised Servers
Security
Namecheap's 30-Hour Outage: When Your Host Takes Your DNS Down With It
Web Hosting
Lazarus Had Your Windows Kernel for 5 Weeks — Patch Tuesday Fixed It
Security
Gemini 3.7 Flash: Google's Biggest Coding Leap Yet, at Half the Price
Artificial Intelligence
WordPress 7.0.4 Fixes CVE-2026-65640: When an Image Upload Becomes a Shell
WordPress
FBI Joint Advisory: Gunra Ransomware Is Still Getting In Through Fortinet Firewalls Patched 18 Months Ago
Security
Meta Muse Glimmer: A 30B Open-Weight Agent That Runs Offline on One GPU
Artificial Intelligence
BdThemes Elementor Plugins Backdoored via Poisoned API — Check Your Site Now
WordPress
KindaRails2Shell: The Image Upload That Hands Attackers Your Server (CVE-2026-66066)
Security
XSS2Shell: WordPress Login Screen XSS Chains to PHP Code Execution
WordPress
EU AI Act Article 50 Is Live — Your AI Chatbot Needs a Disclosure Now
Artificial Intelligence
CVE-2026-9198: Langflow's CVSS 9.8 RCE Is Already Being Exploited
Security
CVSS 10 SonicWall VPN Flaw Now Weaponized by INC Ransomware
Security