Blog.

PHP2Shell and Node2Shell landed on the same day, both now exploited in the wild. One of them lives in a library nobody on your team has ever chosen. Your SDLC has no stage that would have told you, and since September that is a regulatory problem too.

A pre-auth remote code execution flaw in WordPress Core itself, no plugin required. It is already patched, so the story is whether you act - here is who is exposed and what to do now.

Most agencies bill hours. We build tools. Here is why having skin in the game changes everything about how we work.

We are a Prague-based software house focused on complex digital challenges. Here is who we are and how we work.