Skip to content
Egnworks

Topics

Everything we keep coming back to.

57 topics across 39 articles. The bigger the word, the more we have written about it. Pick one to filter the list.

wp2shell CVE-2026-63030 Unauthenticated RCE in WordPress Core

Security

wp2shell CVE-2026-63030 Unauthenticated RCE in WordPress Core

How wp2shell chains two WordPress core bugs into unauthenticated RCE with a full exploit walkthrough SIEM detection and the patch for CVE-2026-63030 and CVE-2026-60137.

Jacob Strix
Pickle Deserialization RCE How a Malicious AI Model Runs Code the Moment You Load It

Security

Pickle Deserialization RCE How a Malicious AI Model Runs Code the Moment You Load It

How a malicious AI model runs code on load through pickle deserialization. Real CVEs a working PoC SIEM detection and the safetensors fix.

Jacob Strix
Context Engineering for Frontend Developers

AI Development

Context Engineering for Frontend Developers

Learn context engineering for frontend AI development. Covers context windows, token management, memory architecture, pruning strategies, and how to build AI features that stay accurate as conversations grow longer.

Jacob Val
Optimizing Interaction to Next Paint for Frontend Developers

Frontend Architecture

Optimizing Interaction to Next Paint for Frontend Developers

Learn how to optimize Interaction to Next Paint (INP) and pass Google Core Web Vitals. Covers INP phases, long task detection, scheduler.yield, React optimization patterns, and real user monitoring strategies.

Jacob Val
Running LLMs in the Browser with WebGPU

AI Development

Running LLMs in the Browser with WebGPU

Learn how to run LLMs directly in the browser using WebGPU, WebLLM, and Transformers.js. A practical guide covering architecture, model selection, Web Worker patterns, Chrome Built-in AI, and when on-device inference beats a cloud API.

Jacob Val
Building RAG Applications as a Frontend Developer

AI Development

Building RAG Applications as a Frontend Developer

Learn how to build Retrieval-Augmented Generation (RAG) applications as a frontend developer. Covers RAG architecture, embedding pipelines, vector search, hybrid retrieval, streaming UI patterns in React and Next.js, and evaluation strategies for production.

Jacob Val
CVE-2025-55182 React2Shell Unauthenticated RCE in React

Security

CVE-2025-55182 React2Shell Unauthenticated RCE in React

How CVE-2025-55182 React2Shell turns a React Server Components request into unauthenticated RCE and how to patch it fast.

Jacob Strix
Detecting Prompt Injection With Your SIEM

AI SecOps

Detecting Prompt Injection With Your SIEM

A hands on build for detecting prompt injection in your SIEM. Telemetry schema regex signatures a Sigma rule and a one class SVM with real code.

Jacob Strix
Hunting LOLBins in Your SIEM With Sysmon and Sigma

Security

Hunting LOLBins in Your SIEM With Sysmon and Sigma

A hands on build for detecting living off the land binaries. Sysmon visibility a Sigma rule for certutil and Atomic Red Team validation with real configs.

Jacob Strix
Building Agentic Frontend Interfaces with AG UI Protocol

AI Development

Building Agentic Frontend Interfaces with AG UI Protocol

Learn how to build agentic AI interfaces in React using the AG-UI protocol. Covers event-driven agent state, generative UI component registries, security patterns for agent-rendered content, and handling long-running agent tasks.

Jacob Val
CVE-2026-45777 Unauthenticated RCE in Open XDMoD and the Chart Export Behind It

Security

CVE-2026-45777 Unauthenticated RCE in Open XDMoD and the Chart Export Behind It

How CVE-2026-45777 turns an Open XDMoD chart export into unauthenticated command execution and how to patch it. A real case with exploit and fix.

Jacob Strix
Graylog MCP Conversational AI for Modern Security Operations

AI SecOps

Graylog MCP Conversational AI for Modern Security Operations

A practical guide to Graylog 7.1 MCP. Connect Claude to your SIEM enable the endpoint use the tools and handle the prompt injection risk.

Jacob Strix
MCP Tool Poisoning and the Hidden Threat to Agentic SecOps

AI SecOps

MCP Tool Poisoning and the Hidden Threat to Agentic SecOps

MCP tool poisoning hijacks AI agents through hidden tool metadata. Benchmarks attack vectors and a three tier defense for security teams running MCP.

Jacob Strix
Model Context Protocol for Frontend Developers

AI Development

Model Context Protocol for Frontend Developers

Learn how frontend developers can integrate the Model Context Protocol (MCP) into AI-powered applications. Covers MCP architecture, building a client, rendering tool calls, multi-server connections, and OAuth authentication.

Jacob Val
CVE-2026-33017 Unauthenticated RCE in Langflow and the 20 Hour Exploit

Security

CVE-2026-33017 Unauthenticated RCE in Langflow and the 20 Hour Exploit

How CVE-2026-33017 turns a public Langflow endpoint into unauthenticated RCE and how to patch it fast. A real case with exploit and fix.

Jacob Strix
CSS Container Queries Building Truly Responsive Components

Frontend Architecture

CSS Container Queries Building Truly Responsive Components

Learn how to use CSS Container Queries to build components that respond to their own container size rather than the viewport. Covers container-type, @container syntax, container query units, cascade layers, and design system integration.

Jacob Val
View Transitions API Building Native Feeling Web Apps

Frontend Architecture

View Transitions API Building Native Feeling Web Apps

Learn how to use the View Transitions API to create seamless page and element animations in modern web apps. Covers same-document and cross-document transitions, React integration, shared element morphing, and accessibility best practices.

Jacob Val
Frontend Monorepo Architecture Turborepo vs Nx and Best Practices

Frontend Architecture

Frontend Monorepo Architecture Turborepo vs Nx and Best Practices

Learn how to build and manage a scalable frontend monorepo using Turborepo or Nx. This guide covers repository structure, shared configuration, CI optimization, remote caching, and how to choose the right tool for your team size.

Jacob Val
WebAssembly for Frontend Developers A Practical Guide

Frontend Architecture

WebAssembly for Frontend Developers A Practical Guide

Learn how to use WebAssembly in frontend applications. A practical guide covering Rust-to-Wasm compilation, the Component Model, real-world use cases like image processing and cryptography, and when JavaScript is still the right choice.

Jacob Val
Building an AI Chatbot Interface with Vercel AI SDK and Next.js

AI Development

Building an AI Chatbot Interface with Vercel AI SDK and Next.js

Learn how to build a production-ready AI chatbot interface in Next.js using the Vercel AI SDK. Covers useChat, streaming responses, tool calling, structured output, multi-model routing, and frontend UX patterns for AI applications.

Jacob Val
Generative UI with Vercel AI SDK: Streaming React Components from AI

AI Development

Generative UI with Vercel AI SDK: Streaming React Components from AI

Learn how to build Generative UI in Next.js using the Vercel AI SDK's streamUI function. Covers streaming React components from AI tools, skeleton loading states, tool registries, and when to use Generative UI over plain text streaming.

Jacob Val
Micro Frontends Architecture Scaling Frontend Like a Pro

Frontend Architecture

Micro Frontends Architecture Scaling Frontend Like a Pro

Learn how Micro Frontends Architecture enables large teams to build scalable, maintainable, and independently deployable frontend modules. A complete practical guide with real-world patterns and best practices.

Jacob Val
React Server Components The New Standard for Modern Web Architecture

Frontend Architecture

React Server Components The New Standard for Modern Web Architecture

A comprehensive guide to React Server Components in 2026. Learn how RSC shifts rendering to the server, reduces JavaScript bundle sizes, improves Core Web Vitals, and redefines how modern frontend architecture is structured.

Jacob Val
Eclipse Equinox OSGi Console RCE CVE-2023-54342 Analysis and Patch Guide

Security

Eclipse Equinox OSGi Console RCE CVE-2023-54342 Analysis and Patch Guide

CVE-2023-54342 is a critical unauthenticated RCE in Eclipse Equinox OSGi 3.8 to 3.18. Learn the exploit mechanism, affected versions, and how to patch it.

Jacob Strix
Building AI Features in Modern Web Applications

AI Development

Building AI Features in Modern Web Applications

Learn how to build production-grade AI features in React and Next.js applications. Covers streaming responses, structured output with Zod, RAG implementation, semantic search, and rate limiting for AI APIs.

Jacob Val
Edge Runtime and the Future of Frontend Deployment

Frontend Architecture

Edge Runtime and the Future of Frontend Deployment

Learn how Edge Runtime is transforming frontend deployment. Covers edge functions, streaming, geolocation, middleware patterns, and how to migrate your Next.js or Remix application to the edge.

Jacob Val
BlueHammer CVE-2026-33825 Windows Defender LPE Analysis and Patch Guide

Security

BlueHammer CVE-2026-33825 Windows Defender LPE Analysis and Patch Guide

CVE-2026-33825 (BlueHammer) is a local privilege escalation zero-day in Windows Defender (CVSS 7.8). Full TOCTOU exploit chain, affected Windows versions, patch 4.18.26030.3011, and detection guidance.

Jacob Strix
Copy Fail CVE-2026-31431 Linux Kernel LPE Analysis and Patch Guide

Security

Copy Fail CVE-2026-31431 Linux Kernel LPE Analysis and Patch Guide

CVE-2026-31431 (Copy Fail) is a Linux kernel local privilege escalation flaw (CVSS 7.8) present since 2017. Learn the root cause, how the 732-byte exploit works and how to patch Ubuntu, RHEL and Amazon Linux before the May 15 CISA deadline.

Jacob Strix
Design Systems at Scale: Building a UI Foundation Your Team Will Actually Use

Frontend Architecture

Design Systems at Scale: Building a UI Foundation Your Team Will Actually Use

Learn how to build a production-grade design system that scales across teams. Covers design tokens, component APIs, Storybook documentation, versioning with changesets, and adoption strategies used by senior frontend engineers.

Jacob Val
Frontend Testing Strategy: From Unit Tests to End-to-End

Frontend Architecture

Frontend Testing Strategy: From Unit Tests to End-to-End

Learn the modern frontend testing strategy used by senior engineers. Covers unit testing, React Testing Library integration tests, Playwright E2E tests, MSW mocking, and CI pipeline setup for React applications.

Jacob Val
Rendering Strategies for Modern Web Apps: CSR, SSR, SSG and Beyond

Frontend Architecture

Rendering Strategies for Modern Web Apps: CSR, SSR, SSG and Beyond

Learn when to use CSR, SSR, SSG, ISR, and Partial Prerendering in your web application. Includes practical decision frameworks used by senior engineers to choose the right rendering strategy per route.

Jacob Val
Web Accessibility: Building Interfaces Everyone Can Use

Frontend Architecture

Web Accessibility: Building Interfaces Everyone Can Use

Learn how to build accessible web applications that meet WCAG 2.2 standards. Covers semantic HTML, keyboard navigation, ARIA patterns, color contrast, and automated accessibility testing.

Jacob Val
Structuring Your Frontend API Layer for Scale and Reliability

Frontend Architecture

Structuring Your Frontend API Layer for Scale and Reliability

Learn how to build a production-grade frontend API layer with typed HTTP clients, domain modules, TanStack Query integration, retry logic, and Mock Service Worker. Used by senior engineers at scale.

Jacob Val
Component-Driven Development: Building UI That Scales

Frontend Architecture

Component-Driven Development: Building UI That Scales

Learn how to build scalable UI with component-driven development. Covers atomic design, design tokens, Storybook, accessibility, and real-world patterns used by senior frontend engineers.

Jacob Val
CVE-2026-41940: The cPanel and WHM Authentication Bypass Explained and How to Patch It

Security

CVE-2026-41940: The cPanel and WHM Authentication Bypass Explained and How to Patch It

Critical cPanel and WHM authentication bypass (CVE-2026-41940, CVSS 9.8) exploited since February 2026. Full root-cause analysis, exploitation chain, patched versions, and step-by-step remediation.

Jacob Strix
Micro-Frontends: Scaling Frontend Teams Without the Chaos

Frontend Architecture

Micro-Frontends: Scaling Frontend Teams Without the Chaos

Learn how to architect micro-frontends that scale across multiple teams in 2026. Covers module federation, shared design systems, routing strategies, and real-world patterns used in production.

Jacob Val
Modern State Management for React: Choosing the Right Tool for the Job

Frontend Architecture

Modern State Management for React: Choosing the Right Tool for the Job

Learn which state management solution is right for your React application in 2026. Covers TanStack Query for server state, Zustand and Jotai for client state, React Hook Form for forms, and URL state patterns.

Jacob Val
Advanced TypeScript Patterns Every Frontend Developer Should Know in 2026

Frontend Architecture

Advanced TypeScript Patterns Every Frontend Developer Should Know in 2026

Learn the advanced TypeScript patterns that define professional frontend development in 2026. Covers discriminated unions, branded types, the satisfies operator, Zod runtime validation, and strict configuration for production-grade codebases.

Jacob Val
Tailwind CSS v4 in 2026: Why It Dominates Modern Frontend Styling

Frontend Architecture

Tailwind CSS v4 in 2026: Why It Dominates Modern Frontend Styling

Explore why Tailwind CSS v4 is the hottest frontend styling tool in 2026. Learn about its new Oxide engine, CSS-first configuration, performance gains, and how to use it effectively in production projects.

Jacob Val