Things I build, break, fix, and write about

26 July 2026
CVE-2026-3300 and WordPress admin account abuse

Everest Forms Pro CVE-2026-3300 is not a tidy bug, it is the sort of mess that turns form input into PHP and then acts surprised when attackers notice. I would not trust any site running the affected versions until the admin accounts, logs, and plugin code have been checked.

26 July 2026
Review CI/CD install scripts for malicious code

Install scripts are the bit people wave through until they bite; in CI/CD, that means code runs under a trusted name before anyone has looked properly...

25 July 2026
Check npm and PyPI packages for compromise

A clean package yesterday means very little if a fresh update arrives with new maintainers, odd install scripts, or a version jump that does not make...

25 July 2026
Missing checks in Cognito external IdP flows

AWS Cognito PreSignUp_ExternalProvider is the last sane place to stop a bad federated login before Cognito writes the user down. I have seen enough...

Latest blog posts you might like

22 March 2024
Setting Up an ESXi Server Without vSphere to Run a Home Network

We will cover the installation of ESXi, configuring virtual switches, ports, and subnets, and finally, setting up a virtual machine (VM) to run a firewall.

8 March 2024
Future Tech: Brain-Computers and Space Colonisation

In the rapidly evolving landscape of technology, two groundbreaking areas stand poised to redefine the future of humanity: Brain-Computer Interfaces (BCIs) and space colonisation.

11 February 2024
The Wonders of Diversified Technology in 2024

Explore the latest in tech trends for 2024, from Generative AI to the Metaverse. Learn how datafication and 3D printing are shaping our digital future.

2 February 2024
Advanced Linux System Administration: Tips and Tricks

Linux system administration requires a deep understanding of the operating system and the various tools available to manage it effectively.

15 January 2024
How to Install WordPress with Apache, MySQL, and SSL

Setting up WordPress on an Ubuntu 20.04 server with Apache, MySQL, and an SSL certificate ensures your website is secure and performant.