Skip to content

What went wrong for others, and what to check on yours

Plain-English write-ups of real hacks, vulnerabilities, outages and PHP errors.

A chat bubble feeding a glass code window with two highlighted insecure lines, a sparkle and a warning shield

Vibe-coded apps and security: what AI-built software often gets wrong

AI can build a working app in an afternoon, but it's weak at asking what could go wrong. What AI-built apps tend to miss, and how to check yours.Nov 5, 2026 · 8 min readRead the article

More articles

A glass checklist panel with orange ticks, a shield, a padlock and a magnifying glass on a dark background

A plain-English website and app security checklist for small businesses

Twenty-eight checks you can run yourself in an afternoon, from forgotten admin logins to unlocked domains. No security degree needed.Nov 5, 2026 · 9 min read

A browser window labelled .env with glowing orange keys spilling out and a warning shield beside it

Exposed .env files and leaked API keys: how to check your site and what to do next

A public .env file or leaked API key hands over your database and payments. Test your site in minutes and learn what to do if you find one.Nov 5, 2026 · 8 min read

A PHP code window with a warning triangle and a tick, surrounded by speed gauges, charts and a wrench

Common PHP errors and how to fix them without breaking your live site

What common PHP errors mean, how to find the real cause, and the settings that stop errors leaking to visitors on your live site.Nov 5, 2026 · 10 min read

Concentric glass walls protecting a central chip, with a glowing line routing around the outer barrier

The Next.js middleware bypass (CVE-2025-29927): why one login check isn't enough

In 2025 a single header could skip Next.js middleware, and the login checks inside it. What happened and how to stop one failure opening every door.Nov 5, 2026 · 7 min read

A blue error screen at the centre of a network of servers, with a severed orange connection

The CrowdStrike outage of July 2024, explained for small teams

A faulty update crashed millions of Windows machines in July 2024. It wasn't a hack, and the lessons on releases and rollbacks apply to any team.Nov 5, 2026 · 7 min read

A terminal window passing code toward a glowing orange cube, with a padlocked shield on the right

PHP CVE-2024-4577 explained: the Windows flaw that let attackers run code

A Windows character-conversion quirk made PHP in CGI mode open to remote code execution in 2024. What it was and how to check your server.Nov 5, 2026 · 6 min read

A glass database tower cracking open with orange light and files scattering across a network

The MOVEit breach explained: how one SQL injection exposed so many organisations

In 2023 attackers used a SQL injection flaw in MOVEit Transfer to steal data from huge numbers of organisations. What it is and how to prevent it.Nov 5, 2026 · 7 min read

A Java terminal window at the centre of a branching network, with one glowing orange node under a shield

Log4Shell explained: what happened and how to check your own software

In 2021 a flaw in a popular Java logging library let attackers run code by getting a server to log a string. The lesson: know what's in your software.Nov 5, 2026 · 7 min read

Latest headlines

Live from The Hacker News, BleepingComputer and PHP.net. Links open the publisher's site.