Articles grouped by business problem, industry, and system type.
The private keys of 8 eMudhra intermediate certificates are compromised, so anyone can forge a certificate for any website. Browsers already block them. Servers, containers, curl and runtimes such as Go, Node.js and Python need updates. The steps, and how we help.
GO-2026-6809 is a fix in crypto/x509 after the private keys of 8 eMudhra intermediate certificates leaked. Without it, a Go program can trust a forged certificate. Go 1.27.3 and 1.26.10 fix it, but every program has to be rebuilt. The steps, and how we help.
Node2Shell is a flaw in the Brotli decoder in Node.js: crafted data can leak process memory or run someone else's code. It reaches Express 5, fetch() and self-hosted Next.js. Node.js 22.23.4, 24.22.1 and 26.12.1 and Bun 1.4.4 fix it. A patch guide, and how we help.
PHP2Shell is two critical flaws in the PHP engine itself, each rated 9.2 under CVSS v4.0. One unauthenticated request can run code on the server. It reaches WordPress, WooCommerce, Magento, Drupal, Joomla, Laravel and Symfony. A patch guide, and how our engineers help.
Security patching
Tell an engineer in 30 minutes where your website, shop and applications run. We list the vulnerable versions, update them, redeploy the services and check the result in production.
Times are shown in your own time zone. We work with clients across time zones.
Meet the engineers who do the workOpenAI makes ChatGPT and Anthropic makes Claude. We belong to the partnership programs of both companies, so we work with their tools every day and learn from the creators themselves.
Claude Partner NetworkParticipation in programs does not mean that OpenAI or Anthropic endorses our services.