Engineering leadership for the AI era, every other week.https://hossamelkashef.com/enhttps://hossamelkashef.com/blog/patch-php-today/https://hossamelkashef.com/blog/patch-php-today/Two critical PHP bugs (PHP2Shell, CVSS 9.2) let an attacker run code on a server with one request, no login. What's affected, the fixed versions, and what I'd do today.Fri, 23 Oct 2026 00:00:00 GMTSecurityPHPhttps://hossamelkashef.com/blog/secrets-are-the-new-target/https://hossamelkashef.com/blog/secrets-are-the-new-target/Railway's security disclosure is a reminder that API keys, especially AI keys, are now the most valuable thing in your stack. Four questions to check this week.Thu, 22 Oct 2026 00:00:00 GMTSecurityAI