Security.
Security news and how-to guides for teams that build and run software, starting with PHP2Shell: what happened, who was exposed and how to patch it fast.
Security news, explained for the people who have to patch it.
When a critical flaw lands, the headlines tell you it is bad. What a CTO needs is the next few hours: what is affected, what to patch first, how to check you were not hit and who on the team owns the job. That is what these posts are for.
The first one covers PHP2Shell, the PHP vulnerability disclosed on 21 October 2026, with a timeline built from what the PHP security team published and a step-by-step fix. Every figure comes from the original advisory or the agency that published it, and each post says what is still unknown.
Security work carries on after the patch. Companies that hire security engineers through us get a dedicated cybersecurity team, fully managed from our offices in Chiang Mai and Bangkok and working full time next to their own developers.