APT CVE-2026-109518: how the package-swap bug gets root, and how to patch Debian and Ubuntu
How CVE-2026-109518 lets an attacker swap a verified apt package, how to check exposure, and the fixed apt versions for Debian and Ubuntu.
System architecture
Data models, migrations and the decisions that are expensive to reverse.
System architecture articles
OpenCode Console breach: which API keys were exposed, and how to rotate them without an outage
What the OpenCode Console breach exposed, who is affected, and a safe order for rotating OpenAI, Anthropic and Google API keys.