Security & continuity

Understand SSHole, the OpenSSH and musl authentication bypass: affected configurations, business risks, fixes and why it is not a buffer overflow.

WordPress CVE-2026-119977 is being exploited. Understand the risk during updates, patched versions and the checks your business should plan.

Compromised eMudhra certification keys: understand the HTTPS risk, vendor protections and checks needed for your websites and applications.

A small website still needs controlled access, regular maintenance and a recovery plan. Understand the risks and the role of managed services.

Security bulletin: October 21, 2026 Following the disclosure of critical vulnerabilities CVE-2026-109618 and CVE-2026-109619, Nuagerie carried out a priority response on its managed cPanel hosting platform. Our technical team tracked official advisory updates, deployed applicable fixes and performed checks to confirm that the patches were present and active in the affected PHP environments. Response status: fixes for both vulnerabilities have been verified across every PHP...

Nuagerie has completed a focused maintenance operation covering security fixes and supporting components of its managed hosting platform. The work included signed vendor updates, a LiteSpeed Web Server build update and checks that the affected components were operating correctly after activation. Security advisories reviewed and addressed The maintenance included fixes associated with CVE-2026-88815 in perl-DBI and CVE-2026-42784 in the cryptographic dependency used by...

Nuagerie has completed a targeted recovery check using a scheduled backup of its managed hosting platform. Our team restored a non-sensitive system file and confirmed that its contents and metadata matched the original. This exercise complements the monitoring of backup jobs with a practical restoration check. Complementary backup layers The platform combines hosting-account and configuration backups with a server image backup. These complementary layers give our team...

Nuagerie has completed a set of improvements to its service-monitoring environment. The work combines an upgrade to the stable monitoring release, adjustments to probe behavior, additional certificate reminders and a cleanup of duplicate alert notifications. After deployment, our team checked fresh monitoring results, confirmed that the public status pages remained available and verified delivery of a test alert. Useful signals for operational follow-up Monitoring is most...

On December 2, 2025, Let’s Encrypt announced staged reductions in certificate lifetimes, moving toward 45-day validity by 2028. The announcement followed the CA/Browser Forum’s broader decision to shorten the maximum validity of publicly trusted TLS certificates. It reinforced the importance of dependable renewal automation. Keep HTTPS working through each renewal A TLS certificate helps a browser establish an authenticated, encrypted connection. Expiry is part of that...

Windows 10 Home and Pro reached the end of standard support on October 14, 2025. The milestone changed the update and support position of many business computers, even when those devices continued to run their usual applications. It made operating-system lifecycle planning an immediate consideration for workplace reliability. Understand the edition and its support status The deadline did not mean every Windows 10 device stopped receiving all updates. Existing Long-Term...

On October 10, 2023, Cloudflare, Google and AWS disclosed HTTP/2 Rapid Reset, tracked as CVE-2023-44487. The technique had been used in large distributed denial-of-service attacks. It illustrated how protocol behavior could put pressure on a service before an application processed a normal request. A risk to service availability HTTP/2 supports multiple exchanges over a connection. Rapid Reset abused the handling of streams and their cancellation to impose disproportionate...

A contact form should help a prospective customer explain a need and reach the right person. Automated submissions can turn that useful channel into a sorting job, while an awkward verification step adds effort for legitimate visitors. On September 28, 2022, Cloudflare introduced the open beta of Turnstile, a CAPTCHA alternative designed to reduce that friction. It could be integrated without routing a website’s traffic through Cloudflare, making it an option to assess...