Operations | Monitoring | ITSM | DevOps | Cloud

The detailed flaw coined “php2shell” is inherent in the PHP language itself, with multiple versions of PHP affected that have been released on the last decade. Ryan Austin, a Calif researcher who helped uncover the issue told the BBC it was, “The most serious vulnerability I’ve ever found". Wiz wrote in a blog post about the detailed findings that would allow hackers to exploit the PHP2Shell issue and take control of an affected web server.

When an auditor tests a control, they ask two questions about each change: was the control met, and what evidence shows how that result was reached? Most automated controls can answer the first. A Rego policy returns allow: true or allow: false, but says nothing about what it checked. Engineers can hand-write violation messages to explain a failure, but a passing check leaves no record at all. When an auditor asks how a change passed, someone has to reconstruct the answer.

AWS Interconnect is coming to Megaport, giving enterprises and AI infrastructure providers another way to scale private AWS connectivity with automation, encryption, and built-in resilience. Megaport customers just got a new AWS connectivity option, and it fits perfectly with how we’ve always believed infrastructure should work: direct, automated, resilient, and easier to operate.

Regulated development teams face a unique code review challenge: every pull request has to satisfy compliance requirements, document an audit trail, and still merge fast enough to keep your sprint on track. The right code review platform closes that gap between governance and velocity. GitKraken gives regulated teams a unified DevEx platform that connects visual pull request workflows, AI-assisted review, and organization-wide security controls in one workspace.

On October 20th, 2026, the PHP Security Team issued an advanced notice and security advisory disclosing two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619), both rated CVSS v4.0 9.2, affecting PHP installations.

One of the most frustrating challenges I faced as a network engineer was troubleshooting problems that had already disappeared. A user would call and report that an application was performing terribly. A site would become unusable for several minutes. Voice calls would break up. File transfers would suddenly slow to a crawl. Then, by the time I started investigating, everything would be working normally again.

Google says it is compute constrained, and GKE teams now hit ZONE_RESOURCE_POOL_EXHAUSTED on CPU machine families, not only GPUs. Here is what the error means, what Google recommends, what AWS can and cannot offer, and how to offload workloads from GCP to AWS with one platform instead of two. Romaric founded Qovery to make Kubernetes accessible to every engineering team. He writes about platform strategy, developer experience, and the future of cloud infrastructure.