Blog
Cloud Services
28 October 2026
Kubernetes: hidden failures that bring down the control plane
A component that doesn't fail can amplify a local error and cause an outage. We analyze three real cases and what to do in your SMB.
27 October 2026
CISA confirms active attacks against two critical PHP flaws
Two PHP vulnerabilities rated 9.2 allow unauthenticated remote code execution. CISA has already seen them exploited in real-world environments.
26 October 2026
CISA alert: two critical flaws already being exploited in Collabora and Arista
The U.S. agency adds two critical vulnerabilities with active exploitation to its KEV catalog. We review the real impact on SMBs and what to do now.
26 October 2026
Critical flaws in Wasmtime: the WebAssembly sandbox breaks
Two critical vulnerabilities in Wasmtime allow a malicious WebAssembly module to escape the sandbox. We analyze the real risk and what to do in your SMB.
24 October 2026
Ruby fixes three bugs in its regex engine behind four GitLab RCEs
Ruby releases versions 4.0.9, 3.4.12 and 3.3.13 to close three bugs in Onigmo, the regular expression engine that originated four critical flaws in GitLab.
23 October 2026
Two CVSS 9.0 RCE Flaws in Linux KSMBD, No Patch Yet
Two remote code execution vulnerabilities in the Linux kernel SMB server reach CVSS 9.0 and are already public. One is exploited without authentication and there is still no patch.
22 October 2026
PHP2Shell: emergency patches and remote execution already underway
PHP releases emergency patches for two critical flaws that allow code execution without an account. We analyze the real risk for SMBs and what to do now.
18 October 2026
Kubernetes doesn't scale with a single number: three different bottlenecks
Adding apiservers doesn't always fix the problem: depending on the type of load you have, it can make it worse. Three ways to run out of headroom in the control plane.
16 October 2026
Cloudflare releases Void: control your employees' vibe-coding apps
Cloudflare open sources Void, a platform to manage applications created by employees with AI. A solution to the shadow IT that worries IT teams.
15 October 2026
NGINX patches 5 flaws: RCE and TLS bypass
NGINX fixes five vulnerabilities, including a possible remote code execution and a TLS flaw that allows bypassing client certificate verification.
15 October 2026
Healthy Kubernetes but requests stall: what to look at
Green probes do not guarantee that the application responds well. We explain why this happens and how to investigate intermittent latency in Kubernetes.
14 October 2026
CVSS 10 Flaw in SAP SDK for Python: OAuth2 Credential Theft
SAP warns of a critical vulnerability in its Cloud SDK for Python that can leak OAuth2 credentials in multi-tenant applications on BTP.