My House Is Made Of PHP: Field Notes From Inside The PHP2Shell Storm
Every few days I check the...
Cinnamon Teal: DuckDB 2.0 Ships a Server Mode, an LTS and a CLI That Talks to AI Agents
On 21 October, the DuckDB team...
Chrome 155 Ships JPEG XL: The Image Format Google Killed Comes Back, Rewritten in Rust
On 6 October 2026, the Chrome...
Next.js Patches Its Third Critical RCE in Two Months — This Time the OG Image Generator Was the Attack Surface
The third critical bug in two...
The WordPress RCE That Needed a Folder Called page-: CVE-2026-87902, Patched in 7.1.2
I run this blog on WordPress,...
Mullenweg’s Fifth Coup: The 48-Hour Boardroom Takeover That Nearly Ousted WordPress’s CEO
On a Wednesday morning in September,...