Blog
Notes on software, AI and cloud
Practical guides and the tech news that matters, written by the Loop Software team for founders and product teams.
· News · 6 min read
Node2Shell Brotli RCE: Patch Node.js, Then Hunt the Hidden Copies
Node2Shell Brotli RCE (CVE-2026-111497) hits Node.js, Bun, Python and curl. Who is exposed, what to patch first, and how to verify it on Azure.
· News · 7 min read
PHP2Shell Vulnerability: Your PHP Runtime, Not Your CMS, Is the Risk
PHP2Shell (CVE-2026-109618/109619) lets attackers run code without a login. Here's why your PHP version matters more than your CMS, and what to patch now.
· News · 7 min read
AI Agent Security: Apply Microsoft's 'Agentic Insider' Model Now
Microsoft now says AI agents are insiders that shouldn't be trusted by default. Here's what changed and how to apply AI agent security patterns without E7.
· News · 6 min read
OpenCode Console Breach: What It Means for Your AI API Keys
The OpenCode Console breach exposed stored OpenAI, Anthropic and Google API keys. Here's what happened and how to lock down AI provider keys now.
· Guide · 10 min read
How to Ship a Production MCP Server for Your SaaS (2026 Spec)
A step-by-step guide to shipping a production MCP server on the stateless 2026-07-28 spec: tool selection, build paths, auth, logging and Azure hosting trade-offs.
· News · 7 min read
PostgreSQL 19 Release Date Slips: AI Review, Reverts and Your Upgrade Plan
PostgreSQL 19 release date is now November 19 after AI-assisted review forced feature reverts. What's out, what's in, and how to plan your PG14 upgrade.
· Guide · 7 min read
Next.js 15 End of Life: A Two-Release Upgrade Plan to 16.4
Next.js 15 end of life is 21 October 2026. A step-by-step plan to move to Next.js 16.4 and Node 24 on Azure App Service in two low-risk releases.
· News · 7 min read
Gemini 4 Argon Is GA: Budget for December, Migrate Like Code
Gemini 4 Argon is generally available, but its launch price doubles on December 1 and migrating from Gemini 3.x breaks code. Here's what teams should do.