FIELD NOTES
Security
Vulnerabilities, patching and hardening for commerce platforms.
PHP’s October 2026 security release: update, restart, verify
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two CVSS 9.2 remote code execution flaws. How to find every PHP runtime, update it properly and…
Adobe Commerce security patches, September to October 2026
Three Adobe Commerce security releases, an exploited zero-day and a critical PHP update in six weeks: what to apply, in what order, and how…
BlockStrap and APSB26-153: check your patch actually applied
October’s CVSS 10.0 template-engine flaw bypassed the September fix. What APSB26-153 contains, and why verifying the deployed code matters more than a green pipeline.
StyleSmuggler: responding to a Magento zero-day
CVE-2026-75650 was exploited for three days before a fix existed. Edge rules, hardening, the hotfix, hunting for compromise and rotating secrets: the response in…