Blog
-
Five kernel settings that harden a shared Linux server while you wait for a patch
When local privilege escalation bugs become public before a fix ships, a shared hosting server has to rely on configuration. Five sysctl and module settings that shrink the kernel attack surface, how to make them survive a reboot, how to verify them, and when not to use them.
-
Node.js, BIND and Java in one week: the October 2026 security releases from the server side
Between 14 and 21 October 2026, ISC patched four high-severity BIND 9 flaws, Oracle shipped its quarterly Java update and an out-of-band alert, Node.js released ten fixes, and eight eMudhra intermediate CAs were blocked after a key compromise. What changed and what to do on the servers that run them.
-
PHP2Shell patch day: a runbook for PHP, Node.js, CloudLinux and cPanel servers
On 21 October 2026 PHP shipped emergency fixes for PHP2Shell, two unauthenticated remote code execution flaws, on the same day as a Node.js security release. What was patched, how the hosting stack received it, and what to do before, during and after the update.
-
PHP and Node.js in 2026: the security releases and what to do on your servers
PHP and Node.js both shipped high-severity security fixes in 2026. Here is what changed, which versions are still supported, and a checklist for the servers that run them.