Custom software, AI and cybersecurity, from the people who do the work.
Custom software and AI projects for SMEs and healthcare, updates not to put off, vulnerabilities to close. What is happening, what to do and what we did on the 110+ servers we manage. Every article cites its sources.
Backdoor in the Claude Code extension: what really happened and what to do
Claude Code extension 2.1.313, served by Cursor, opened an SSH tunnel to the attacker. Who is at risk, which claims have been retracted and how to clean up the machine.
Google Workspace, Microsoft 365, Proton or Kerio: which email for your business
Google Workspace, Microsoft 365, Proton Mail and managed Kerio Connect: prices, privacy, where data lives and when each one makes sense, with the migrations we have done.
Getting found by ChatGPT and AI assistants: what you really need and what you can skip
Rules for AI bots, Content Signals, a Markdown version, llms.txt: what we do on the sites we manage, in what order, and what we leave out because it is not needed.
PHP2Shell: our perimeter, third-party rescues and rebuilt hosting
Inventory, patching, mitigations on end-of-life systems, compromise checks and rebuilds from scratch: the method we used after PHP2Shell, including on servers that are not ours.
The death of WordPress? What is really changing and what to do with your website
From 43% to 40% in nine months: why WordPress is losing share, what developers say, Bedrock and headless as middle paths, and a grid to decide whether to stay or move.
Two critical PHP vulnerabilities: what to do, and what we did
CVE-2026-109618 and CVE-2026-109619: versions to install, temporary mitigations and the method we followed on the day of the fix, from inventory to verification.
Custom software with AI: when to build it and when to buy
Software is not in crisis: the way it is sold is. Data, risks and a practical grid for deciding what to build and what to buy.
Custom software in healthcare with AI: what you can build and where to stop
GDPR, NIS2, medical devices and the AI Act: what a healthcare provider can build in-house and what it should buy certified.
October 2026 Patch Tuesday: what to update right now on Windows servers
1,413 vulnerabilities in one month and a zero-day already exploited: the priorities for DHCP, Active Directory, Hyper-V and Remote Desktop, and what to do with end-of-life servers.
Kerio Control and Kerio Connect: public exploits and updates you should not put off
Three vulnerabilities rated 9.8 out of 10 and exploits now public: which Kerio Control and Kerio Connect versions to install, which ports to close and when to reinstall the firewall.
Have a custom tool in mind?
Tell us what you do today and what is slowing you down. We reply within one working day with a first technical read.
- hello@cloudfactory.it
- Address
- Viale di Trastevere 114, 00153 Rome, Italy