Writing

Notes from the work.

Field notes from the IrenicTech team on building AI agents, AI automation, and custom software, and on shipping production AI products that actually reach real users.

Agentic AI AI Engineering Cybersecurity AI Security Security & Compliance AI Native AI Strategy Application Security MCP SaaS Architecture Threat Intelligence Web Development AEO Cloud Infrastructure

Cybersecurity

Why Your Platform Needs to Be Secure: What We Can Learn From the Railway and Primcloud Incident

A Railway engineer says agents he was running caused activity that Primcloud's founder calls an attempt on his infrastructure. The public argument is about intent. The more useful questions are what separates a penetration test from everything else, and what the reported steps would find on your own platform. Here is what is confirmed, what is only alleged, and what to do this month.

IrenicTech · Nov 5, 2026 · 19 min read

Cybersecurity

Ivanti Connect Secure: Three Chained Flaws, Root Access, and Why Patching Is Not the End of It

Attackers were using three chained Ivanti Connect Secure flaws by at least 3 October, before Ivanti had a fix for the 22.8 and 25.1.1 lines, or for the full chain, so the 29 October update closes the door without telling you who already came through it. This post gives a team with no security operations staff a way to judge exposure from dates, read the Integrity Checker honestly, and rotate the secrets a VPN appliance holds.

IrenicTech · Nov 2, 2026 · 16 min read

Cybersecurity

The ASOS Breach: How One Tricked Employee Opened the Customer Data

In October 2026, ASOS customers got a push notification from the ASOS app saying the company had been hacked. ASOS says it started with one employee tricked into handing over a login. No malware, no software flaw. Here is how that kind of attack works, and the handful of controls that stop it at a company of any size.

IrenicTech · Oct 27, 2026 · 6 min read

Cybersecurity

Railway, Zeabur, TiDB Cloud: When Your Hosting Platform Leaks Your Keys

In one month, Railway, Zeabur and TiDB Cloud all disclosed that attackers reached data their customers trusted them with, including the passwords and API keys apps run on. If a developer built your app on a platform like these, here is what to check, what to rotate, and how to make the next leak cost you less.

IrenicTech · Oct 27, 2026 · 7 min read

Cybersecurity

PHP2Shell: The PHP Flaw That Puts Most Business Websites at Risk

Two critical PHP vulnerabilities, known together as PHP2Shell, let an attacker run code on a web server without logging in. Attacks started before the patch shipped, and most servers are still unpatched. Here is what a business owner needs to check, in plain language.

IrenicTech · Oct 27, 2026 · 7 min read

Cybersecurity

Ransomware Is Up Nearly 50%, and Small Businesses Are Taking Most of It

Ransomware had its busiest quarter in over a year, and the typical victim is not a bank or a hospital chain. It is a manufacturer, an IT firm or a professional services company with fewer than 200 people. Here is what the Q3 2026 numbers show, why backups alone no longer save you, and the short list of controls that matter most.

IrenicTech · Oct 27, 2026 · 6 min read

AI Automation

Nine Production Automations Have 31 Endings. Fewer Than Half Are the Happy Path

Almost nobody publishes the architecture of the automations they deliver, so almost nobody can say what one actually looks like. We publish nine, which means we can count them. Across 139 nodes and 148 edges in nine sectors, the systems fan out rather than funnel: 15 ways in against 31 ways out. And of those 31 endings, only 15 are the thing the system was built to do. The rest are refusals, holds, escalations and self-maintenance.

IrenicTech · Sep 23, 2026 · 7 min read

SaaS Architecture

Agent-Ready SaaS: Building Software Other People's Agents Can Use

For twenty years the question was whether a person could use your product. The new question is whether an agent can, because agents now shortlist, evaluate, operate and increasingly buy software on someone's behalf. Agent-readiness is not a feature you add later; it is a property of your data model, your API and your permission system. This is what it actually requires.

IrenicTech · Sep 21, 2026 · 8 min read

Agentic AI

AI Agent Development in 2026: From First Prototype to Production

Most writing about AI agents is either a demo or a warning. This is the working guide: what an agent is made of, how it reaches your systems through MCP, when one agent should become several, how much the model choice actually matters, why the majority never reach production, and what governance has to be in place before any of it is load-bearing. Every section links to the deeper piece on that question.

IrenicTech · Sep 21, 2026 · 16 min read

Read us on Google

Make IrenicTech a preferred source.

Tell Google you want our work first. It takes one tap, and IrenicTech is favoured in your Top Stories, AI Mode, and AI Overviews whenever you search the topics we write about.

Add to preferred sources

Notes from the work.

Why Your Platform Needs to Be Secure: What We Can Learn From the Railway and Primcloud Incident

Ivanti Connect Secure: Three Chained Flaws, Root Access, and Why Patching Is Not the End of It

The ASOS Breach: How One Tricked Employee Opened the Customer Data

Railway, Zeabur, TiDB Cloud: When Your Hosting Platform Leaks Your Keys

PHP2Shell: The PHP Flaw That Puts Most Business Websites at Risk

Ransomware Is Up Nearly 50%, and Small Businesses Are Taking Most of It

Nine Production Automations Have 31 Endings. Fewer Than Half Are the Happy Path

Agent-Ready SaaS: Building Software Other People's Agents Can Use

AI Agent Development in 2026: From First Prototype to Production

Make IrenicTech a preferred source.

Tell us what you’re building.