Cybersecurity

Understand SSHole, the OpenSSH and musl authentication bypass: affected configurations, business risks, fixes and why it is not a buffer overflow.

WordPress CVE-2026-119977 is being exploited. Understand the risk during updates, patched versions and the checks your business should plan.

Compromised eMudhra certification keys: understand the HTTPS risk, vendor protections and checks needed for your websites and applications.

A small website still needs controlled access, regular maintenance and a recovery plan. Understand the risks and the role of managed services.

Security bulletin: October 21, 2026 Following the disclosure of critical vulnerabilities CVE-2026-109618 and CVE-2026-109619, Nuagerie carried out a priority response on its managed cPanel hosting platform. Our technical team tracked official advisory updates, deployed applicable fixes and performed checks to confirm that the patches were present and active in the affected PHP environments. Response status: fixes for both vulnerabilities have been verified across every PHP...

Nuagerie has completed a focused maintenance operation covering security fixes and supporting components of its managed hosting platform. The work included signed vendor updates, a LiteSpeed Web Server build update and checks that the affected components were operating correctly after activation. Security advisories reviewed and addressed The maintenance included fixes associated with CVE-2026-88815 in perl-DBI and CVE-2026-42784 in the cryptographic dependency used by...

Nuagerie has completed a coordinated maintenance operation on PHP runtimes and supporting CloudLinux components used by its managed hosting platform. The work included PHP packages, extensions, supporting libraries and Imunify components, followed by checks of application responses and the configurations used by hosted websites. Maintaining the components behind your applications A website relies on more than its application code. PHP extensions, libraries and the hosting...

Nuagerie has completed the activation of an additional filtering layer for incoming and outgoing email on the managed hosting platform. The deployment integrates Imunify Email with the existing mail services and retains the established spam and malware controls. Initial verification included real message flows, service health and encrypted SMTP connectivity. Protection in both directions Incoming filtering adds another stage of examination before messages reach their...

Nuagerie has completed a set of improvements to its service-monitoring environment. The work combines an upgrade to the stable monitoring release, adjustments to probe behavior, additional certificate reminders and a cleanup of duplicate alert notifications. After deployment, our team checked fresh monitoring results, confirmed that the public status pages remained available and verified delivery of a test alert. Useful signals for operational follow-up Monitoring is most...

Windows 10 Home and Pro reached the end of standard support on October 14, 2025. The milestone changed the update and support position of many business computers, even when those devices continued to run their usual applications. It made operating-system lifecycle planning an immediate consideration for workplace reliability. Understand the edition and its support status The deadline did not mean every Windows 10 device stopped receiving all updates. Existing Long-Term...

On October 10, 2023, Cloudflare, Google and AWS disclosed HTTP/2 Rapid Reset, tracked as CVE-2023-44487. The technique had been used in large distributed denial-of-service attacks. It illustrated how protocol behavior could put pressure on a service before an application processed a normal request. A risk to service availability HTTP/2 supports multiple exchanges over a connection. Rapid Reset abused the handling of streams and their cancellation to impose disproportionate...

On June 5, 2023, Google began rolling out an open beta that let Workspace administrators allow users to sign in with passkeys instead of entering a password. The launch announcement described a gradual rollout and an administrator-controlled option. This was a milestone in workplace authentication, not an automatic switch for every organization. Reduce the role of passwords in everyday work Passkeys use public-key cryptography to provide phishing-resistant authentication....