All posts

Each link is the full post as JSON, with its title, summary and content in English, French and German.

• PHP2Shell: Patching Hundreds of Servers Before the Botnet Gets There (2026-10-25): Two unauthenticated remote code execution bugs in PHP itself, the exploit in the wild the day the fix shipped, and most of the web on versions that will never get a package. Here is what the response looks like when the agent is already on every server: find the exposed hosts without touching one, check the ones that were hit, update PHP across hundreds of machines in one request, and apply the PHP project's own mitigations where no update exists. And why this is what every vulnerability looks like from now on.
• Privileged Access, Brought to the Next Level: No Passwords, No VPN, No Bastion (2026-09-15): Your administrators hold a root password, an SSH key, a VPN profile and a domain account, and every one of them outlives the reason it was issued. Now picture them holding none of it: just a ManageLM account, a passkey, and a page listing the servers they may open. Terminals, Windows desktops, file transfer and an assistant that reads the screen, with no credential anywhere in the story.
• Not Another Webmin: The Admin Tool That Could Only Be Built Now (2026-08-31): Control panels have looked the same since 1997, because every button is a guess somebody made in advance about your future Tuesday. Everything they never guessed ended up in an unlogged SSH session. Why agents change what an admin tool can be, and why the PKCS#11 keystore is the clearest proof.
• The Password Nobody Changes: Why Credential Rotation Keeps Failing (2026-08-21): Most companies have a 90-day rotation policy and a handful of service accounts that haven't changed since 2019. The gap isn't discipline: changing one password means changing it in six other places in the same minute. Where vaults, PAM and Ansible stop short, and why an agent that's already on every server changes the maths.
• What is ManageLM? Explanation for non-techs (2026-07-31): Your team runs your servers by writing what they want in plain English, and an allowlist written in code decides what is actually allowed to happen. Here's how that works, why the AI never holds the keys, and the security review pre-answered so you can forward this to whoever is about to ask.
• Four Locks on One Door: The Complete Infrastructure Security Stack (2026-05-30): Most security platforms give you one lock on the door. ManageLM gives you four: internal audits, daily CVE checks, external pentests, and live threat detection. All bundled into compliance-ready reports.
• I Was Scared To Let An AI Manage My Servers. I Use It Every Day Now. (2026-04-30): Five reasonable fears about letting an AI run commands on production, what actually happened, and how my daily admin life looks now. Includes one 4:12 AM page that ended in eleven minutes.
• How a DGX Spark Accidentally Became a Server Management Platform (2026-04-03): It started with an NVIDIA DGX Spark, a parade of open-source models, and one nagging question: what is this thing actually useful for? The answer turned into ManageLM, AI server management that keeps your data where it belongs.
• Why MCP Changes Everything for Server Management (2026-03-31): The Model Context Protocol (MCP) by Anthropic gives AI tools a structured, authenticated way to interact with external systems. For server management, this is transformative. It replaces fragile scripts and manual SSH sessions with secure, auditable, natural-language operations. Here's how ManageLM leverages MCP to make infrastructure management safer and more accessible.
• Introducing ManageLM: AI-Powered Server Management (2026-03-25): Meet ManageLM, the platform that lets you manage your entire Linux and Windows infrastructure using natural language. Built on Claude's MCP protocol with local LLM execution, command allowlisting, and zero inbound ports.