Author
Principal Engineer specialising in Magento 2, Adobe Commerce, DevOps, and e-commerce security
Sam James writes about a range of topics drawn from professional experience in Magento, DevOps, and e-commerce engineering.
APSB26-73 is Adobe Commerce's July 2026 isolated security patch, covering 2.4.6-p15, 2.4.7-p10, 2.4.8-p5 and 2.4.9. Here's what's in it, the non-cumulative gotcha that trips people up, and the fastest way to apply it.
AI is a force multiplier for Magento development — but it multiplies whatever processes you already have. Here's the operational stack your team needs before leaning heavily into AI-generated output.
The sequel to CopyFail: DirtyFrag extends the CVE-2026-31431 exploit chain to container escape. Covers the new attack surface, detection, and mitigations beyond the algif_aead workaround.
CVE-2026-31431 is a Linux kernel local privilege escalation via algif_aead. Covers exploit mechanics, detection, the algif_aead mitigation, and patch status across Ubuntu, Fedora, Debian, RHEL, and more.
How GitHub accidentally leaked webhook secrets via an erroneous HTTP header, what data was exposed, and the exact steps to rotate your secrets now.
Deep dive into the Magento 2 Polyshell remote code execution vulnerability — how it works, how to test if you're affected, and how to apply the patch.
Production DevOps documentation: CI/CD pipelines, Ansible/Terraform automation, monitoring strategies, and infrastructure deployment workflows.
CI/CD pipeline guides for GitHub Actions and Bitbucket: workflow automation, artifact management, environment cleanup, and troubleshooting.
Bitbucket Pipelines CI/CD guides: Renovate dependency automation, pipeline configuration, and third-party integrations for DevOps workflows.
Configure Renovate Mend for automatic dependency updates in Bitbucket. Step-by-step setup guide with marketplace integration and config examples.
Production-tested GitHub Actions workflows: SSH config, artifact cleanup, environment management, Dependabot automation, bulk actions state management, and troubleshooting guides.
Automate GitHub Actions artifact cleanup with CLI commands. Bulk delete workflows, manage storage, and optimize repository artifacts efficiently.
Active contributor on Magento Stack Exchange — answers cover development, performance, security, and troubleshooting.
Explained that they are disabled in the first place for security reasons, and provided a few ways to re-enable them if needed. View on StackExchange →
PHPCS fixer is not supported above PHP7.2, explained options on how to install without dev dependencies, remove the package or downgrade PHP to a supported version. View on StackExchange →
Explained that the issue likely stemmed from not setting the max package weight correctly, which in turn would set the max package weight to zero. View on StackExchange →
Provided an example of a systemd timer and service file to run Magento cron jobs, along with instructions on how to enable and start the timer. View on StackExchange →
Provided an non exhaustive list of steps to help secure a Magento 2.3 site, including using WAFs, file/IP restrictions, Scanning Tools, Integrity monitoring and more. View on StackExchange →