From the studio.
What we ship, who joins the team, where you can find us this quarter. No corporate press releases.
PHP2Shell: critical PHP vulnerability, what Hypernode and we are doing
A critical vulnerability in PHP itself is playing out worldwide today, dubbed PHP2Shell. Two flaws (CVE-2026-109618 and CVE-2026-109619) allow remote code execution without logging in, on virtually every PHP website. So not just Magento, but also WordPress, Shopware and custom tools. There is no incident at any of our customers right now. Update 14:15 CEST: Hypernode is taking the entire platform offline at 14:30 until the patch is installed, expected to last until 15:30. Below: what is going on, what Hypernode and we have done, and what you still need to check yourself.
Online masterclass: how to get customers to place 60% of your B2B orders themselves
On Thursday 19 November we are hosting a free online masterclass on the B2B customer portal: what it needs to do in 2026 and how to set it up for your shop. 45 minutes, Q&A included. Sign up via WebinarGeek.
StyleSmuggler: Magento zero-day actively exploited
During the night of Friday 4 to Saturday 5 September, a previously unknown Magento vulnerability was actively exploited: StyleSmuggler. Unauthenticated remote code execution on Magento 2.4.6 through 2.4.9, with no patch in existence. Below: what it actually is, what to do now, and what we did. At the bottom you will find the full timeline of that weekend — when what was discovered and when protection landed.
Hypernode Platinum Partner-status
We have achieved Hypernode Platinum Partner status! This Platinum Partner status perfectly complements our Hyvä Platinum Partner status, making us the only agency in the world to have obtained both distinctions.