PHP2Shell: How We Prepared Before the Patch Arrived
PHP2Shell is the name for two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can let attackers run code on a server without a login.…
Resources
Practical notes on hosting, security and WordPress.
What we have learned running websites since 2002: security bulletins, maintenance advice and plain-English explanations for business owners.
-
-
Who Patches What in Managed Hosting
If your hosting is managed, what is actually being managed? The short answer: every website runs on two stacks, and they are maintained by…
-
What Twenty Four Years of Hosting Taught Us About Reliability
We have operated servers since 2002. In that time, hardware became faster, control panels changed, and cloud platforms became the default answer to almost…
-
Your Traffic Dropped and Your Rankings Did Not. Here Is How to Tell Which Problem You Actually Have.
Somewhere in the last year, a strange support conversation became common across the industry. A business owner notices traffic is down, checks their rankings,…
-
Cloudflare Is Changing How AI Can Access Your Website on September 15. Before You Block Everything, Here Is What It Actually Means.
On September 15, Cloudflare is changing the default settings that control how AI companies can access websites on its network. If you have a…
-
The Silent Website Killers: 15 Hidden Problems That Could Be Costing You Leads, Sales, and Customers
What if I told you your website could be losing customers every day without showing a single warning sign? Your homepage loads. Your logo…
-
WordPress 7.0 Is Here. Here’s How We’re Handling It for Our Maintenance Customers.
WordPress 7.0 dropped today (May 20, 2026), and it’s one of the most architecturally significant core releases we’ve seen in years. New AI integration…
-
Blue Arctic Security Bulletin: Fragnesia and Recent cPanel Security Updates
It has been a busy few weeks for Linux and web hosting security. Following recent kernel level vulnerabilities like Copy Fail and Dirty Frag,…
-
Dirty Frag and Copy Fail CVE-2026-31431 Managed Hosting Security
Dirty Frag and Copy Fail: Why Managed Hosting Security Is More Than Applying Updates When a serious Linux kernel vulnerability becomes public, the clock…
-
Blue Arctic Has Evolved. Here’s What That Means for Your Business.
We didn’t just redesign our website. We rebuilt how we present what we do, who we serve, and how we support our clients. Because…