FIELD NOTES
eCommerce
Magento / Adobe Commerce, BigCommerce and commerce platform engineering.
Adobe Commerce security patches, September to October 2026
Three Adobe Commerce security releases, an exploited zero-day and a critical PHP update in six weeks: what to apply, in what order, and how…
BlockStrap and APSB26-153: check your patch actually applied
October’s CVSS 10.0 template-engine flaw bypassed the September fix. What APSB26-153 contains, and why verifying the deployed code matters more than a green pipeline.
StyleSmuggler: responding to a Magento zero-day
CVE-2026-75650 was exploited for three days before a fix existed. Edge rules, hardening, the hotfix, hunting for compromise and rotating secrets: the response in…
Enforce code quality before review with GrumPHP
Formatting and coding-standard checks belong to a machine. Setting up GrumPHP with the Magento coding standard, rolling it out sensibly, and backing it up…
Optimising Magento 2 Performance on AWS
Where Magento 2 performance actually comes from on AWS: caching layers, right-sized data services, indexers and the measurements that tell you what to fix…
Troubleshooting Varnish Caching Issues
A practical checklist for the usual Varnish problems in commerce: low hit rates, stale content, leaked personalisation and purges that never arrive.
Lessons from High-Traffic eCommerce Migrations
Upgrades and replatforms rarely fail on code. They fail on data, integrations and cutover planning. What I check before a busy store changes underneath…