Writing

Incident Response Articles

Posts on handling production incidents, outages, security events, and postmortems.

PHP2SHELL (CVE-2026-109618): Patching a Small PHP Estate on Release Day

How we prepared for and patched PHP2SHELL (CVE-2026-109618 and CVE-2026-109619) across native, Docker and Kubernetes PHP, from a Slack leak to the last site back.

StyleSmuggler (CVE-2026-75650): Emergency Magento 2 Mitigation & Recovery

How to detect, contain and recover from StyleSmuggler (CVE-2026-75650 / VULN-39341, APSB26-146), the actively exploited Magento and Adobe Commerce zero-day RCE.