Updates, news and developments from hosting, security and Internet infrastructure.
Web & WordPress
Plugin count alone is a poor measure of a WordPress site; quality, overlap and maintenance matter more.
Security
HTTP security headers allow a website to tell browsers how certain content and connections should be handled.
Security
A backup is useful only if it survives the incident it is supposed to recover from. If production credentials can also delete every backup…
Security
The principle of least privilege limits each user, process or application to the access it actually needs.
Security
Website compromises often involve more than one malicious file. Attackers may leave backdoors, scheduled tasks, unauthorized administrators…
Security
Maintenance windows are useful for orderly operations, but not every vulnerability can safely wait.
Security
Automated login attempts remain common against hosting panels, CMS logins, SSH services and mailboxes.
Security
On 25 August 2025 CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog: two Citrix Session Recording flaws and a Git…
Security
The aim is to connect the technology with everyday operational decisions. Logs provide a timeline of requests, authentication events, errors and system activity.
Hosting
The aim is to connect the technology with everyday operational decisions. PHP versions have defined support lifecycles.
Security
This article is based on a real 2025 incident or official security disclosure. On 28 July 2025 CISA added CVE-2025-20281 and CVE-2025-20337 affecting Cisco Identity Services Engine to its Known Exploited Vulnerabilities catalog…
Security
The aim is to connect the technology with everyday operational decisions. Backups are primarily designed to restore systems after deletion, corruption, failure or compromise.
