In October 2026, serious news that shook the world's web infrastructure spread rapidly. Two extremely dangerous ...

PHP2Shell (CVE-2026-109618/109619) enables RCE without authentication. Patches are coming today; the NCSC and other sites are ...

Spread the love“`html If you run a website powered by PHP, you’ve probably heard the whispers, or maybe even the full-blown ...

Estonian web traffic security company Blackwall has raised $100 million in a Series C round led by AVP. The company's valuation reached $2.2 ...

A pair of critical vulnerabilities in PHP, the programming language powering approximately 70% of websites worldwide, could allow attackers to execute code on vulnerable servers without logging in or ...

PHP will release emergency fixes for 2 critical RCE flaws, as researchers warn of potential risks to exposed and unsupported ...

Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password.

PHP released versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21, at roughly 13:35 UTC on Wednesday. The releases fix ...

CVE-2025-14847 (MongoBleed) let hackers seize Rainbow Six Siege backend in Dec. 2025. 87,000+ MongoDB servers remain exposed ...

Cloudflare has deployed emergency web application firewall rules after detecting early attacks targeting two critical PHP vulnerabilities, ahead of a scheduled security release on October 21, 2026.

Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP ...

PHP2Shell involves two critical PHP RCE flaws rated CVSS 9.2, with emergency fixes scheduled following a disclosure leak.