Two RouterOS flaws, exploited in the wild since 2 September 2026, let anyone take over a MikroTik router with SSH exposed, no credentials needed. Who is at risk, how to check, how to update.
Where the tokens and passwords a CI/CD pipeline needs should live: why a secret in the repository cannot be deleted, masking and protected branches, short-lived identities with OIDC.
On 31 August 2026 Proxmox VE 8 leaves support: no more security fixes for kernel, QEMU and the cluster stack. What you risk by staying, what breaks in version 9 and how to upgrade without downtime.
What a CI/CD pipeline is, explained simply: continuous integration, continuous delivery, working examples with GitHub Actions and GitLab CI, and what is worth putting inside one.
A site keeps working on an old PHP, until it doesn't: without security fixes every new flaw stays open forever. What end of support really means and how to upgrade without drama.
The waves of compromised npm packages - from chalk/debug to the Shai-Hulud worm and the 2026 episodes - and a simple, effective defence: pnpm's minimumReleaseAge, with tested configuration examples.