CVE-2026-119977: WordPress Upgrade-Window RCE in 2026
A long-form security briefing for WordPress owners, developers, agencies, and hosting teams
14 min read
What we have worked out, written down
Top 2026 HONOR Robot Phone: Camera, Features, Price and Trade-offs
Explore the HONOR Robot Phones moving gimbal camera, ARRI video tools, China pricing, AI features, and the practical trade-offs behind its unusual design.
6 min read
CVE-2026-76026: The Chrome Autofill Flaw Behind Sandboxed RCE
Google has patched a high-severity memory corruption flaw in Chrome Autofill. This article follows its disclosure, explains the sandbox boundary, and lists the updates users need.
6 min read
Node2Shell Explained: The Brotli Bug Behind Node.js RCE
A flaw in Google's Brotli decoder lets a crafted compressed request or response crash, leak or take over a Node.js process. This is how it was found, named, patched and exploited, and what to fix first.
6 min read
PHP2Shell: the PHP bug that let attackers in before your app woke up
Two critical flaws in PHP let attackers run code without logging in. This is the story of how they were found, leaked, patched and exploited, and what you should do now. Topic: Security
4 min read
SEO in 2026: how to get cited when nobody clicks
A growing share of searches are answered before anyone clicks a result. That does not make SEO obsolete, but it does change what you optimise for.
2 min read
Core Web Vitals: the three numbers worth arguing about
Most Core Web Vitals advice is a list of thirty optimisations. In practice, a handful of causes account for the overwhelming majority of bad scores.
2 min read
When custom software is the wrong answer
We are a software company, so treat this with appropriate suspicion: most businesses asking for custom software should buy something instead.
2 min read
Tell us what is not working
A thirty-minute call, no deck and no obligation. You will leave with a straight answer about whether this is worth building - including if that answer is no.