# Log: articles on software, AI and security

Software, AI, security and infrastructure for people who make decisions in a business. Every article cites its sources.

- [PHP2Shell: our perimeter, third-party rescues and rebuilt hosting](https://cloudfactory.it/en/articles/php2shell-perimeter-rescues-rebuilds/index.md): Inventory, patching, mitigations on end-of-life systems, compromise checks and rebuilds from scratch: the method we used after PHP2Shell, including on servers that are not ours.
- [The death of WordPress? What is really changing and what to do with your website](https://cloudfactory.it/en/articles/is-wordpress-dead/index.md): From 43% to 40% in nine months: why WordPress is losing share, what developers say, Bedrock and headless as middle paths, and a grid to decide whether to stay or move.
- [Two critical PHP vulnerabilities: what to do, and what we did](https://cloudfactory.it/en/articles/critical-php-vulnerabilities-october-2026/index.md): CVE-2026-109618 and CVE-2026-109619: versions to install, temporary mitigations and the method we followed on the day of the fix, from inventory to verification.
- [Custom software with AI: when to build it and when to buy](https://cloudfactory.it/en/articles/custom-software-ai-smes/index.md): Software is not in crisis: the way it is sold is. Data, risks and a practical grid for deciding what to build and what to buy.
- [Custom software in healthcare with AI: what you can build and where to stop](https://cloudfactory.it/en/articles/custom-software-healthcare-ai/index.md): GDPR, NIS2, medical devices and the AI Act: what a healthcare provider can build in-house and what it should buy certified.
- [October 2026 Patch Tuesday: what to update right now on Windows servers](https://cloudfactory.it/en/articles/patch-tuesday-october-2026-windows-server/index.md): 1,413 vulnerabilities in one month and a zero-day already exploited: the priorities for DHCP, Active Directory, Hyper-V and Remote Desktop, and what to do with end-of-life servers.
- [Kerio Control and Kerio Connect: public exploits and updates you should not put off](https://cloudfactory.it/en/articles/kerio-control-connect-vulnerabilities-2026/index.md): Three vulnerabilities rated 9.8 out of 10 and exploits now public: which Kerio Control and Kerio Connect versions to install, which ports to close and when to reinstall the firewall.