Blog
Notes from the ops room.
Hosting, infrastructure, development, and SEO — written by the people doing the work.
Synology NAS units on outdated DSM hit by C3RB3R ransomware
Backup & Recovery
Set up automatic security updates on Ubuntu 24.04 and AlmaLinux 9
Tutorials
Registrar DNS hijacks hit DebugBear and at least 12 Name.com domains
Security
CVE-2026-119977: WordPress core updater RCE hits 4.7 through 7.1.3
WordPress
Binance links $6.3B theft to a compromised DevOps engineer laptop
Security
CVE-2026-46300: May Linux kernel bug chained with PHP2Shell for root
Security
CVE-2026-98432: Linux TCP flaw rated 9.8, no Ubuntu or RHEL fix yet
Security
UpdraftCentral key theft: WP-CLI checks for rogue plugins and admins
Tutorials
CVE-2026-111497: Brotli decoder RCE now on CISA exploited list
Security
LiteLLM 1.107.0 on PyPI and Docker stole credentials for two hours
Security
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 patch two leaked RCE flaws
Security
Rank Math PRO 3.0.123 downloads carried a backdoor for 11 hours
WordPress
MariaDB CVE-2026-92262 rated 9.9; fixed builds out since August 24
Security
ConnectWise Cloud Backup credential abused in 173 Microsoft 365 tenants
Security
CVE-2026-110447: Nextcloud Collabora app flaw used to plant webshells
Security