Knowledge Hub

Engineering Insights

Engineering intelligence, AI strategies, and digital transformation guides for SMBs in Sydney's Hills District.

Latest Articles

PHP2Shell and WordPress: Why `php -v` Is the Wrong Check
PHP Security

PHP2Shell and WordPress: Why `php -v` Is the Wrong Check

A correctly patched Ubuntu server reports PHP 8.3.6 against an upstream floor of 8.3.36. Here is how to actually verify you are patched against CVE-2026-109618 and CVE-2026-109619 — and why your WordPress security plugin stays green either way.

Ash Ganda
12 min read
Seven Checks That Answered the Wrong Question
Incident Response

Seven Checks That Answered the Wrong Question

A CVSS 9.2 PHP patch turned into a host migration. Seven verification steps passed while wrong or failed while right — including a security gate that reported PASS on a completely broken site, and a config validator that caused the outage it existed to prevent.

Ash Ganda
11 min read
Per-Brand Email From One Sending Path
Cloud Infrastructure

Per-Brand Email From One Sending Path

Five brands, one sending service, five templates. Consolidating the infrastructure while keeping the brands distinct is the right trade — and it puts every brand on one shared reputation, which cuts both ways.

Ash Ganda
8 min read
Turnstile, Honeypots and What Still Gets Through
Cloud Infrastructure

Turnstile, Honeypots and What Still Gets Through

Spam protection on a form stops bots. It does not stop a real person typing a fake address, an address with a typo, or somebody else entirely. Three layers, what each catches, and what none of them do.

Ash Ganda
8 min read
GST on AI API Spend: What Changed for Australian Customers
IT Strategy

GST on AI API Spend: What Changed for Australian Customers

A GST notice from one AI provider arrived the same fortnight as two subscription renewals, and together they made a point about how AI spend accumulates: in small amounts, across several vendors, charged to whoever set it up.

Ash Ganda
8 min read
The Backup You Have Not Restored
Cybersecurity

The Backup You Have Not Restored

A backup job that has been writing an empty archive for eight months reports success every night. The only test that distinguishes a backup from a habit is a restore, and almost nobody has run one.

Ash Ganda
8 min read