Operations | Monitoring | ITSM | DevOps | Cloud

TL;DR On October 21, 2026, PHP released emergency patches for two critical flaws known together as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). An attacker with no credentials can use them to run code on a PHP web server, in some cases with a single HTTP request. Upgrade to PHP 8.2.35, 8.3.36, 8.4.27 or 8.5.12 now. Then go through your logs, because exploitation attempts were recorded before the patch shipped. In this post.

The best cloud migration tool depends on what you are moving, from where, to where, and whether you can afford downtime. Native tools (AWS Transform MGN, Azure Migrate, and Google Cloud Migration Center) move servers into their own cloud. Replication tools move VMs and data with minimal downtime. Kubernetes tools move containerized apps. Platforms like Control Plane let you run the same workloads in the old and new environment at once, so you cut over gradually.

Data residency is about where data is stored and processed. Data sovereignty is about whose laws and operators can reach it. The strongest setups put regulated data in in-country regions or with sovereign providers, hold their own encryption keys, enforce placement with policy, and keep the ability to move. No single provider covers every country, so most teams combine two or three. Disclosure: Control Plane publishes this guide and is one of the options listed. This guide is not legal advice.

AI agents are overloading source control and CI. See how 7x growth in PRs and builds at Harness shaped Agent-Ready SCM.

Railway's disclosure of leaked customer environment variables is a reminder that deployment platforms hold the keys to everything. Here is how secrets leak from platforms, the practices that prevent it or limit the damage, and exactly how Qovery stores secrets across its control plane and your data plane, with AWS Secrets Manager, Parameter Store, GCP Secret Manager, Doppler and Infisical. Romaric founded Qovery to make Kubernetes accessible to every engineering team.

A code sandbox like Daytona or E2B isolates a process. A sandbox environment isolates a whole stack: services, databases, queues and configuration, cloned for one agent task and destroyed when it is done. Here is how sandbox environments work, what they are good for, and how to run them on Qovery. Romaric founded Qovery to make Kubernetes accessible to every engineering team. He writes about platform strategy, developer experience, and the future of cloud infrastructure.