OpenSSH 10.6p2: musl Password Bypass and Interview Qs
OpenSSH 10.6p2 fixes a musl password bypass in sshd. See who is affected, how to patch or mitigate, and five interview questions it prepares you for.
Category Security
Residential Proxy Detection: What the White House Case Shows
Residential proxy detection explained: what the White House exit-node case shows and how to catch proxy traffic by behavior, not by IP reputation lists.
PHP2Shell CVE-2026-109618: Fix and Interview Questions
PHP2Shell (CVE-2026-109618 and CVE-2026-109619): affected versions, the fix, and five interview questions on memory safety and stale state.
APT CVE-2026-109518: Fix, Impact and Interview Questions
APT CVE-2026-109518 let a network attacker swap a verified package. See what changed in APT 3.3.6, how to patch, and the TOCTOU interview questions.
CVE-2026-98432 Linux Kernel TCP Flaw: Fix and Interview Qs
CVE-2026-98432 is a Linux kernel IPv4 TCP use-after-free. See who is affected, which kernels fix it, how to patch, and the interview questions it covers.
Next.js Security Release: 7 Fixes and Interview Questions
Next.js security release of Nov 3, 2026 fixes 7 issues, incl. cross-tenant cache leaks. See affected versions, the upgrade path and interview questions.
npm Supply Chain Attacks 2026: 5 Defense Layers to Set Up Now
33 malicious packages hit npm in May 2026 stealing AWS credentials at install time. Here's the exact 5-layer defense every JavaScript developer needs now.
PHP2Shell Postmortem: 25 Rooted Servers and 6 PHP Lessons
PHP2Shell postmortem: how a custom exploit chain rooted 25 servers running old PHP 8.0, which releases fix it, and six patching lessons for PHP teams.
Claude Code Extension Backdoor: Fix, Impact, Interview Qs
Claude Code extension backdoor in version 2.1.313 planted an SSH key on developer machines. See who is affected, how to clean up, and interview questions.
AI Found a 27-Year-Old Bug: Project Glasswing Dev Guide 2026
Anthropic's Project Glasswing uses Claude Mythos Preview to find decades-old bugs that tools missed. Here's what it means for your code and what you can use today.