Hardening and patching Linux servers and cloud infrastructure.
Stolen UpdraftCentral keys were used to backdoor WordPress sites from 18 October 2026. Who is affected, how to update and delete keys, how to detect the backdoor and how to clean up.
Eight eMudhra intermediate CA keys were trivially weak and browsers are removing the emSign ECC Root CA – G3. Who is affected, how to check your certificate chain, and what to update.
A practical, tested checklist for securing Linux on AWS EC2: Session Manager instead of open SSH, IAM roles, IMDSv2, security groups, EBS encryption, SSH hardening, patching, GuardDuty, Inspector and backups.
A step-by-step guide to finding every PHP install on your Linux server, patching PHP2Shell (CVE-2026-109618/109619), verifying the fix and checking for signs of compromise.
