Martin's corner on the web

personal blog

incident response

The patch that couldn’t install: a WordPress core exploit created an admin on this blog

How a broken auto-updater left my blog open to a WordPress core RCE (wp2shell, CVE-2026-63030) and the boring IP rule that saved it anyway.

By Martin | July 22, 2026 | Security | No Comments |

Someone exploited a WordPress core RCE and created an admin account on my blog while I slept. They came back, logged in with valid admin credentials.....

The closure of the Bosch Engineering Center in Sofia and the layoff of 670 people is disturbing news in many ways. Established and gone in just 7 year...

After seeing a few management-issued AI targets i can confirm hallucinations are not exclusively an AI problem.

Just bought SPCX. if it goes to the moon it’s not a short squeeze, it’s just the business model.

€14.5k into DIY solar in 2022, or the same into VUAA? ETF would be up ~€12.5k on paper, ~€7k after inflation. But the panels generated 27.7 MWh so ...