Two critical PHP core bugs leaked a day before the embargo. The fix ships on October 21, and most PHP servers on the internet will not get it.
php2shell, Two Critical PHP Bugs Leaked Before the Patch
Content for: #DevOps
Nginx Ingress Is Dead: Your Complete Guide to What Comes Next
The Kubernetes team has retired the nginx ingress controller. The repo is archived, no more releases, no security patches. Here’s your complete guide to the three migration paths: Gateway API, dual-support controllers, and alternative ingress controllers, with real examples and honest comparisons.
Trivy GitHub Actions Compromised: Full Malware Payload Analysis
On March 19, 2026, the Trivy vulnerability scanner was compromised for the second time in three weeks. Attackers force-pushed 75 out of 76 version tags in aquasecurity/trivy-action to deliver an infostealer that scrapes runner memory, harvests cloud credentials, and exfiltrates everything via encrypted channels. Here’s my full analysis of the malware payload and what you need to do if your workflows were affected.
Secure Kubernetes Apps with Cert-Manager and Let’s Encrypt
Discover how to secure your Kubernetes applications using cert-manager and Let’s Encrypt. This comprehensive guide covers automated SSL certificate management, HTTPS setup, and best practices for reliable and secure deployments.