Docker SBOM Checklist for Hosting and CI Teams
Use Docker SBOMs to inventory container images, verify dependencies, connect vulnerability scanning, and prepare supply-chain reviews before production changes.
Learn MoreColumn 1
Latest DIY Tech Guides
NGINX 1.31.2 and 1.30.3 Security Update: Hosting Checklist
Patch NGINX 1.31.2 or 1.30.3 for June 2026 security fixes. Check HTTP/3, proxy and gRPC paths, charset handling, config validation, safe reloads, logs, CDN behavior, and rollback planning.
Learn More
CISA KEV: Patch Lantronix EDS5000 CVE-2025-67038
CISA added Lantronix EDS5000 CVE-2025-67038 to KEV. Patch affected serial device servers, restrict management access, and verify industrial network exposure.
Learn More
CISA KEV: Patch Critical Ubiquiti UniFi OS CVEs Before June 26
Patch Ubiquiti UniFi OS CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910, then verify model-specific fixed versions and exposure.
Learn More
Docker Content Trust Retirement: Migration Checklist for CI and Kubernetes
Docker is retiring Docker Content Trust and the Notary v1 service. Use this checklist to find DCT use, plan brownout tests, and migrate to Cosign or Notation.
Learn More
WordPress WooCommerce Scraper CVE-2025-69129 Removal Guide
CVE-2025-69129 and CVE-2025-69131 affect WordPress & WooCommerce Scraper Plugin through 1.0.7. Remove it, replace the import workflow, and verify WooCommerce.
Learn More
OptinMonster, TrustPulse, and PushEngage Supply Chain Incident Checklist
A protect-only WordPress site-owner checklist for the OptinMonster, TrustPulse, and PushEngage supply-chain incident: who should check, what to inspect, and when to rotate credentials.
Learn More
MariaDB 10.6 Is EOL: cPanel and CloudLinux Upgrade Checklist
MariaDB Community Server 10.6 is now EOL. Inventory affected cPanel and CloudLinux hosts, choose a supported path, test applications, and verify the upgrade safely.
Learn More
WooCommerce 11.0 Upgrade Checklist: Stock, Cache, and Scheduled Actions
Prepare for WooCommerce 11.0: test failed-order stock restoration, product object caching, scheduled actions, checkout, and store extensions safely.
Learn More
Mastra npm Supply-Chain Attack: Developer and CI Cleanup Checklist
Security researchers report that 140+ @mastra npm packages were affected by a supply-chain attack involving easy-day-js. Check lockfiles, CI runners, dependency caches, and exposed secrets before rebuilding.
Learn More