Custom software, AI and cybersecurity, from the people who do the work.
Custom software and AI projects for SMEs and healthcare, updates not to put off, vulnerabilities to close. What is happening, what to do and what we did on the 110+ servers we manage. Every article cites its sources.
Website accessibility fines in Italy: who is really at risk and how much
Who is really covered by the European Accessibility Act and the Stanca Law, what is at stake, what has happened so far in Italy and Europe and why a widget is not enough.
Residential proxies: when an office device lends out your connection
TV boxes, free apps and VPNs that resell your connection: what residential proxies are, what they can do inside a company network and the checks to run today.
Cookie fines in Italy: what is really at stake and who gets fined
The multi-million figures are the legal maximum: for cookies alone, the SMEs checked since 2024 received reprimands. Who checks, what they find, what to fix first.
Linux servers: a limited user is no longer enough. Updated kernels and reboots
948 privilege escalation exploits found by AI agents: why per-user isolation only holds with updated kernels and regular reboots, and what to do on an SME's servers.
Hidden instructions: the little-known risk of AI agents, explained simply
What prompt injection is, where hidden instructions come from, real cases from 2025 and 2026 and four practical rules for using AI agents without needless risk.
Extensions and AI tools on company computers: the risks and how to manage them
From Chrome extensions to AI connectors: eight real incidents, the recurring patterns and the settings an SME can turn on today without getting in the way of work.
A website without a cookie banner: when you can and how
A banner is needed only for non-essential tracking. What to remove, what to replace, which alternatives really work and where the EU reform stands.
Backdoor in the Claude Code extension: what really happened and what to do
Claude Code extension 2.1.313, served by Cursor, opened an SSH tunnel to the attacker. Who is at risk, which claims have been retracted and how to clean up the machine.
Google Workspace, Microsoft 365, Proton or Kerio: which email for your business
Google Workspace, Microsoft 365, Proton Mail and managed Kerio Connect: prices, privacy, where data lives and when each one makes sense, with the migrations we have done.
Getting found by ChatGPT and AI assistants: what you really need and what you can skip
Rules for AI bots, Content Signals, a Markdown version, llms.txt: what we do on the sites we manage, in what order, and what we leave out because it is not needed.
PHP2Shell: our perimeter, third-party rescues and rebuilt hosting
Inventory, patching, mitigations on end-of-life systems, compromise checks and rebuilds from scratch: the method we used after PHP2Shell, including on servers that are not ours.
The death of WordPress? What is really changing and what to do with your website
From 43% to 40% in nine months: why WordPress is losing share, what developers say, Bedrock and headless as middle paths, and a grid to decide whether to stay or move.
Two critical PHP vulnerabilities: what to do, and what we did
CVE-2026-109618 and CVE-2026-109619: versions to install, temporary mitigations and the method we followed on the day of the fix, from inventory to verification.
Custom software with AI: when to build it and when to buy
Software is not in crisis: the way it is sold is. Data, risks and a practical grid for deciding what to build and what to buy.
Custom software in healthcare with AI: what you can build and where to stop
GDPR, NIS2, medical devices and the AI Act: what a healthcare provider can build in-house and what it should buy certified.
October 2026 Patch Tuesday: what to update right now on Windows servers
1,413 vulnerabilities in one month and a zero-day already exploited: the priorities for DHCP, Active Directory, Hyper-V and Remote Desktop, and what to do with end-of-life servers.
Kerio Control and Kerio Connect: public exploits and updates you should not put off
Three vulnerabilities rated 9.8 out of 10 and exploits now public: which Kerio Control and Kerio Connect versions to install, which ports to close and when to reinstall the firewall.
Have a custom tool in mind?
Tell us what you do today and what is slowing you down. We reply within one working day with a first technical read.
- hello@cloudfactory.it
- Address
- Viale di Trastevere 114, 00153 Rome, Italy