Security

Server security, incidents, hardening, and lessons from the trenches.

Jul 16, 2026 7 min read

One Server, Five Days Hijacked, Discovered by Pure Chance

An outdated Next.js app running as root, a crypto-miner, five days unnoticed. A real incident, taken apart forensically, and the lessons worth remembering before it hits your server.

One Server, Five Days Hijacked, Discovered by Pure Chance