01
↗
Field notes
Ak Development
Updating Your Plugins Won’t Fix php2shell. Do You Know Where PHP Runs in Your Business?
On October 21, the PHP project released fixes for two critical flaws in the PHP engine, known together as php2shell. They let an attacker who is not logged in run their own code on a server that handles web requests with PHP. Attackers did not wait. Amazon saw an exploit attempt four days before the […]
AI Made Code Cheap. The Bill Now Shows Up in Review
Two reports published on October 20 ask the same question from different sides. AI coding tools help developers produce more. Is the business actually getting more? Gergely Orosz of The Pragmatic Engineer spoke with engineers and engineering leaders at 27 companies about what they spend on AI and what changed. ActiveState, a company that sells […]
The Most Useful AI in Accounts Payable Might Be a Second Pair of Eyes
On October 19, BILL, the US finance platform used by nearly 500,000 businesses, announced a new set of AI features. The part I find most useful is the least exciting one. Before a bill gets paid, the AI looks at it and asks a simple question: does this look like what this vendor usually charges […]
One Leaked AI Key Can Run Up Your Bill. The OpenCode Breach Is a Good Reason to Check Yours
Late on October 16, someone got into an old system at OpenCode, the company behind a popular open-source AI coding agent. The next morning, OpenCode emailed a small group of users with a simple message: the AI provider keys you saved with us may have been exposed. Revoke them and create new ones. Only 1.4% […]
Your ERP Now Has a Door for AI Agents. Who Decides What Walks Through?
This week, two very different ERP vendors shipped the same idea. On October 16, DANAOS Projects released ProjectVIEW ERP v12 with an MCP connector, so assistants like Claude and ChatGPT can work with the system directly. Days earlier, at Rising 2026, Workday said its Trusted Agent Platform is now “headless”, with its own MCP tools […]
GitHub Will Now Let an AI Agent Fix Your Security Alerts. Here Is What That Means for Business Software
Many software teams already know where their security problems are. The hard part is finding time to fix them. That is why two GitHub releases from October 15, 2026 caught my attention: agentic autofix for code scanning alerts and AI Scan for pull requests, both now generally available. My question is simple. What practical problem […]
Prompt Architect: Build Better AI Prompts Faster in 2026 – A Practical Guide
Prompt Architect — Clean desktop interface for building powerful AI prompts Quick Summary: Stop getting generic, robotic answers from AI. Prompt Architect helps you build highly structured, context-rich prompts in seconds. This guide explains prompt engineering fundamentals (tokens, context, output quality), why organization matters, and how a practical tool accelerates real business growth. Table of […]
Custom Software vs SaaS in 2026: The Ultimate Decision Guide for Small Businesses and Founders
Professional team collaborating in a modern office meeting room discussing business strategy and software decisions Quick Summary: Choosing between SaaS and custom software isn’t about which is “better” — it’s about which fits your stage, unique processes, budget horizon, and growth ambitions. This practical 2026 guide breaks down the real trade-offs with frameworks, real examples […]
Building a Custom Web App That Actually Works for Your Business
Most people think building a custom web app is mainly about design — making something that looks polished and professional. In reality, the design is probably the last thing you should think about. What comes before it is far more important, and skipping those steps is exactly why so many custom software projects fail to […]
