PHP: two critical vulnerabilities fixed — how to secure your web server
Two critical CVEs, patched versions and container runtime checks.
Understand, configure and secure your digital tools.
Practical tutorials, accessible explanations and feedback to move from diagnosis to action.
NEW ARTICLE
Read the article
Rank Math PRO: when an official update compromises WordPress
Rank Math PRO 3.0.123: who was affected in October 2026, why updating alone is not enough, and how to respond.
RECENT PUBLICATIONS
See all tutorials
The latest articles and tutorials
Rank Math PRO: when an official update compromises WordPress
Compromised official package: who was affected and why updating alone is not enough.
Software monitoring: why knowing the version is not enough
Versions, CVEs and exposure: prioritize fixes.
ConnectWise incident: when Microsoft 365 backups become unavailable
ConnectWise: audit app access and plan for a backup provider outage.
Remote Administration: Why Installing a Patch May Not Be Enough
BeyondTrust: a patch does not necessarily rule out earlier compromise.
Commercial refrigeration cyberattacks and connected equipment
Network exposure, monitoring and business continuity.
When AI Agents Exceed Their Permissions
Isolation, least privilege and human review: lessons from Anthropic’s report.
AI Is Finding Vulnerabilities Faster: Who Will Verify and Fix Them?
OSS Scanner accelerates discoveries. Validation and remediation remain essential.
Git was built for humans. AI agents are pushing GitHub and GitLab to rethink it
Why massively parallel agents are pushing platforms to adapt Git, CI, merges and traceability.
Kubernetes: why storage is part of your attack surface
Dell CSM vulnerabilities show why CSI drivers, operators and storage belong in the Kubernetes security perimeter.
Cloudflare plans a public CA: what it means for TLS
Why ACME, ARI and post-quantum certificates point to the next stage of the Web PKI without requiring an urgent migration today.
WordPress: when the patch becomes the attacker playbook
Why the gap between patch publication and automated probing can now be measured in hours.
AI agents: why the sandbox is becoming as important as the prompt
Why filesystem, network and credentials need hard boundaries when an agent can execute commands.
GitHub hardens SSH: do you need to change your keys before October 2026?
What changes for RSA, SHA-1 and the post-quantum ML-KEM key exchange from October 14.
From npm to GitHub: lessons from the CrowdSec incident on tokens and offboarding
Why revocation, expiry and credential inventory should be part of every offboarding process.
Plugin4Shell: when a pinned plugin can still execute different code
An AI-agent supply-chain flaw shows why requesting a SHA is not enough unless the final checkout is verified.
npm stage-only: why your CI should no longer publish alone
npm separates automated release preparation from final publication: CI stages the version, a maintainer approves it with 2FA.
Cache key injection: when the HTTP cache becomes an attack surface
Why ambiguous cache keys can create collisions and which defensive checks can be considered without destructive testing.
Third-party scripts and CDNs: your website can be compromised without your server being hacked
The Brevo incident illustrates how third-party JavaScript can be modified in the delivery chain while the origin server remains unchanged.
Why management consoles are high-impact targets: the vCenter case
CVE-2026-59310 shows why exposure and asset role should heavily influence remediation priority.
AI for developers: should you still choose the model yourself?
Why routing each task to the right model can improve cost, latency and quality without turning every check into AI.
Shadow APIs: the Internet-facing services you may have forgotten
Why old APIs, staging environments and forgotten endpoints quietly expand your attack surface.
npm security: why a published and scanned package is not necessarily safe
What the return of Shai-Hulud teaches us about dependency security, CI/CD secrets and software supply chains.
Rotate a technical password without causing downtime
A safe method to migrate a service credential without forgetting dependencies or interrupting operations.
Content Security Policy: how to protect a website
Understand CSP directives and strengthen a policy without breaking the site.
How to find CSV duplicates safely
Choose a reliable key and avoid deleting legitimate lines.
Domain alert: how to identify what is truly urgent
Sort alerts according to their impact and intervene in the right order.
Is a backup reliable if you have never restored it?
Test file recovery before an incident occurs.
HTTP 200: Why your site can still fail
Check expected content to detect false-positive availability.
Why monitor your site from outside?
Independent monitoring, incident confirmation, history and recovery.
Back up a website to a NAS with Restic
Coherent copy, encryption, monitoring and true restoration test.
Website unavailable: checks to run in the right order
Methodically locate a failure before changing the configuration.
Understanding A, AAAA, CNAME, MX and TXT DNS records
The role of each record and frequent configuration errors.
TLS certificate: what it really protects
Understand HTTPS and anticipate renewal incidents.
The backup rule 3-2-1 explained simply
Three copies, two media, one off-site copy and tested restorations.
SPF, DKIM and DMARC explained simply
Three complementary mechanisms to authenticate emails and protect a domain.
Free vs paid VPN: key differences
Understand economic models, limits and trust criteria.
Monitor a domain, its TLS certificate and DMARC
Define a baseline score and detect significant regressions.
Configure SPF, DKIM and DMARC at OVHcloud
Protect outbound email without blocking legitimate messages.
10 common Dockerfile mistakes
Images, secrets, privileges and the build process: key points to review.
Validate OpenAPI before deployment
Add a useful quality gate before deployment.
Fix invalid JSON file
A step-by-step method to quickly find the error.
DNS audit before production
Check resolution, HTTPS, email and DNS security in the correct order.
DEVELOPMENT ROADMAP
View the roadmap
See what is available and what comes next.
The roadmap presents the project priorities without committing to artificial deadlines.