WordPress

Back From Sweden, Straight Into a CIS Benchmark Rabbit Hole

kubebench_part1

Back From Sweden, Straight Into a CIS Benchmark Rabbit Hole

raphael 20. August 2026

🇸🇪 I’m back from Sweden. Tan: nonexistent (it’s Sweden). Mosquito bite count: illegal. Motivation to touch my...

Measure First, Optimize Second: Chasing a 1.5 MB Page (and Why the Database Was Innocent)

bodybuilder

Measure First, Optimize Second: Chasing a 1.5 MB Page (and Why the Database Was Innocent)

raphael 29. July 2026

My blog felt heavy. The homepage weighed in around 1.5 MB and my first instinct was the...

Teaching My Blog to Sniff Its Own Uploads: ClamAV on WordPress (and Proving It Actually Barks)

secure_man

Teaching My Blog to Sniff Its Own Uploads: ClamAV on WordPress (and Proving It Actually Barks)

raphael 28. July 2026

A WordPress uploads folder is supposed to hold your holiday photos and the occasional PDF. It is...

🥷 I Spent an Evening Trying to Break Into My Own Blog. It Banned Me. Twice

grayhat_hacker

🥷 I Spent an Evening Trying to Break Into My Own Blog. It Banned Me. Twice

raphael 28. July 2026

A few days ago the news served up a delightfully unsettling story: OpenAI admitted that two of...

wp2shell, a Fake Chrome, and a Botnet in a Trenchcoat: What My Own Access Logs Told On Me

wp2shell_hacker

wp2shell, a Fake Chrome, and a Botnet in a Trenchcoat: What My Own Access Logs Told On Me

raphael 23. July 2026

A few days ago, “wp2shell” made the rounds — an unauthenticated RCE chain in WordPress, cobbled together...

Some text and images on this site are AI-assisted or AI-generated. Details