Join my community / free newsletter — sign up here

incident response

By Greg Nowak, 19 June, 2026

The latest WordPress supply-chain attack was a CDN problem too

The June 16, 2026 WordPress supply-chain incident was not just a plugin update story. It exposed how CDN access, third-party scripts, and cleanup gaps can leave sites exposed.

Tags

By Greg Nowak, 19 June, 2026

Cloudflare BYOIP customers need a rollback plan, not just trust

Cloudflare's February 2026 BYOIP outage showed that provider resilience has limits. If your prefixes carry production traffic, rollback needs to be mapped and tested.

Tags

By Greg Nowak, 17 June, 2026

June 2026 WordPress Plugin Exploits Put Inventory to the Test

June 2026 WordPress exploit reports show why businesses need plugin inventory, license visibility, patch tracking, and compromise checks after updates.

Tags

By Greg Nowak, 14 May, 2026

Cloudflare’s Enforce DNS-Only Switch: Test Your Origin Before an Incident

Cloudflare’s account-wide DNS-only switch can bypass its proxy in an emergency. Test certificates, firewalls, capacity, and rollback before relying on it.

Tags

incident response

Review Greg on Google

Illustrated infographic summarizing: AI crawler policy now has verbs: separate search, RAG, and training

AI crawler policy now has verbs: separate search, RAG, and training

2026-08-02

AI crawler rules now need separate decisions for search, RAG, and training, backed by practical testing across robots.txt, CDNs, WAFs, and CMS controls.

Illustrated infographic summarizing: WordPress Supports Old PHP; Your Production Server Shouldn’t

WordPress Supports Old PHP; Your Production Server Shouldn’t

2026-08-01

WordPress still runs on legacy PHP, but compatibility is not a security policy. Build and test your upgrade path before PHP 8.2 support ends.

Illustrated infographic summarizing: The AI-built tool your team relies on needs an owner

The AI-built tool your team relies on needs an owner

2026-07-31

AI-built internal tools can become business-critical before anyone owns them. Here is how to secure, review, monitor, and retire them without blocking useful work.

Illustrated infographic summarizing: Your AI model has an expiry date: build the migration lane now

Your AI model has an expiry date: build the migration lane now

2026-07-30

AI models retire on a schedule. Learn how to map dependencies, test replacements, release safely and preserve a working rollback route.

Illustrated infographic summarizing: Copilot Has Repo-Level Metrics Now. What Should Teams Measure?

Copilot Has Repo-Level Metrics Now. What Should Teams Measure?

2026-07-29

GitHub’s repo-level Copilot metrics show where AI is active, but not whether it adds value. This scorecard connects usage with delivery, quality, and cost.

Illustrated infographic summarizing: Not Every AI Job Needs an Instant Answer: Batch the Backlog

Not Every AI Job Needs an Instant Answer: Batch the Backlog

2026-07-28

Move delay-tolerant AI work into dependable batch queues to cut processing costs without compromising quality, data controls, or urgent workflows.

Illustrated infographic summarizing: A stray Set-Cookie can waste your CDN: audit the cache at the edge

A stray Set-Cookie can waste your CDN: audit the cache at the edge

2026-07-27

Cloudflare Cache Response Rules can recover wasted CDN capacity, but first you need a route-level audit of public, personal and authenticated responses.

Illustrated infographic summarizing: Shorter TLS certificates expose every renewal you never automated

Shorter TLS certificates expose every renewal you never automated

2026-07-26

Shorter TLS lifetimes leave less room for manual handoffs and faulty deploy hooks. Build a renewal path that protects service availability.

Illustrated infographic summarizing: One Timeout, Two Orders: Make AI Actions Safe to Retry

One Timeout, Two Orders: Make AI Actions Safe to Retry

2026-07-25

A timed-out AI action may already have succeeded. Stable keys, durable ledgers, queues and stored results prevent a routine retry from duplicating real work.

Illustrated infographic summarizing: Your AI Visibility Dashboard Needs a Methodology, Not More Charts

Your AI Visibility Dashboard Needs a Methodology, Not More Charts

2026-07-24

A practical framework for measuring AI-search visibility with fixed prompts, repeated tests, separate metrics, retained evidence, and honest reporting.