PHP2Shell: Being ready for surprises.

By: Oussama Jarrousse Yesterday’s emergency PHP security release was another race against the clock. At Simula, we had prepared for the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) ahead of the security release scheduled for October 21 at...

Patch Fast. Observe Everything. Keep It Boring.

By: Oussama Jarrousse When a software patch is released, a race begins. On one side, attackers rush to reverse-engineer the patch, understand the vulnerability it fixes, weaponize it, and start attacking systems that are still vulnerable. On the other side,...

Bringing WordPress Security into the Observability Stack

By: Oussama Jarrousse At Simula, we believe that if you cannot observe a system, you cannot reliably operate it. We apply that philosophy to all our services, including our managed WordPress hosting service. That means continuously monitoring not only availability and...

How Observability Helped Us Stay Ahead of the wp2shell Incident

By: Oussama Jarrousse In July, the WordPress ecosystem experienced another reminder that even the most widely used platforms can be affected by newly discovered security vulnerabilities. While the technical details of the so-called “wp2shell”...