Join my community / free newsletter — sign up here

incident response

By Greg Nowak , 19 June, 2026

The latest WordPress supply-chain attack was a CDN problem too

The June 16, 2026 WordPress supply-chain incident was not just a plugin update story. It exposed how CDN access, third-party scripts, and cleanup gaps can leave sites exposed.

Tags

By Greg Nowak , 19 June, 2026

Cloudflare BYOIP customers need a rollback plan, not just trust

Cloudflare's February 2026 BYOIP outage showed that provider resilience has limits. If your prefixes carry production traffic, rollback needs to be mapped and tested.

Tags

By Greg Nowak , 17 June, 2026

June 2026 WordPress Plugin Exploits Put Inventory to the Test

June 2026 WordPress exploit reports show why businesses need plugin inventory, license visibility, patch tracking, and compromise checks after updates.

Tags

By Greg Nowak , 14 May, 2026

Cloudflare’s Enforce DNS-Only Switch: Test Your Origin Before an Incident

Cloudflare’s account-wide DNS-only switch can bypass its proxy in an emergency. Test certificates, firewalls, capacity, and rollback before relying on it.

Tags

incident response

Review Greg on Google

Written recommendations from Trafik og Veje, Aarhus Municipality (2011) and AgroTech (2010) — read them on LinkedIn.

Illustrated infographic summarizing: Should publishers add Google’s new Preferred Sources button?

Should publishers add Google’s new Preferred Sources button?

2026-08-24

Google’s Preferred Sources button is worth a controlled test for eligible publishers, with careful choices around placement, performance and measurement.

Illustrated infographic summarizing: Search Console Can See TikTok Now. Your Reporting Has to Catch Up

Search Console Can See TikTok Now. Your Reporting Has to Catch Up

2026-08-23

Google can now report how social profiles appear in Search. Here is how to measure cross-channel discovery without mistaking visibility for business results.

Illustrated infographic summarizing: Your AI workflow has logs. Can they explain one bad decision?

Your AI workflow has logs. Can they explain one bad decision?

2026-08-22

Logs can show that every service worked while leaving a bad AI decision unexplained. See how connected traces and careful redaction close the gap.

Illustrated infographic summarizing: Security Questionnaires Eat Into Selling Time—Let AI Find the Evidence

Security Questionnaires Eat Into Selling Time—Let AI Find the Evidence

2026-08-21

NIS 2 is generating more supplier questionnaires. A controlled AI assistant can find approved answers and sources—and route uncertain cases for review.

Illustrated infographic summarizing: Locked out of your Apple developer account? Fix it before October 1

Locked out of your Apple developer account? Fix it before October 1

2026-08-20

Apple's updated developer agreement must be accepted by October 1, 2026, and many small app owners cannot even log in. Here is where Apple's two-factor codes really go, and how to fix your access before the deadline.

Illustrated infographic summarizing: Cloudflare Workflows Now Charges by the Step—Price the Outcome

Cloudflare Workflows Now Charges by the Step—Price the Outcome

2026-08-20

Cloudflare Workflows now bills paid plans for steps and stored state. Here is how to track cost per completed outcome without weakening reliability.

Illustrated infographic summarizing: Google’s AI Search Toggle Is a Publishing Decision, Not an SEO Setting

Google’s AI Search Toggle Is a Publishing Decision, Not an SEO Setting

2026-08-19

Google’s AI Search toggle forces a commercial choice about visibility, attribution and content use. Here’s how to make that choice responsibly.

Illustrated infographic summarizing: From Supplier Invoice to Bookkeeping: AI with a Control Checkpoint

From Supplier Invoice to Bookkeeping: AI with a Control Checkpoint

2026-08-18

AI can reduce the work involved in processing supplier invoices, but reliable bookkeeping requires validation, duplicate checks, approval and a clear audit trail.

Illustrated infographic summarizing: Nginx 1.30 Changed the Upstream Defaults—Test Before You Upgrade

Nginx 1.30 Changed the Upstream Defaults—Test Before You Upgrade

2026-08-17

Nginx 1.30 defaults upstream proxying to HTTP/1.1 with keepalive enabled. Here is what to inspect, model and test before upgrading.

Illustrated infographic summarizing: OpenAI’s Assistants API Shuts Down in Ten Days. Is Your App Ready?

OpenAI’s Assistants API Shuts Down in Ten Days. Is Your App Ready?

2026-08-16

OpenAI’s Assistants API shuts down on August 26, 2026. Learn what to inventory, how to preserve state and how to cut over without breaking the product.