The Latest
There Isn't An Easy Exploit For This PHP Vulnerability

There Isn’t An Easy Exploit For This PHP Vulnerability

Elias Taylor says circulating PHP proof-of-concept exploits fail on vanilla PHP, while warning administrators to patch the real vulnerability.
The 22-Year Road To PHP2Shell: How AI-Assisted Review Finished An Old Story

The 22-Year Road To PHP2Shell: How AI-Assisted Review Finished An Old Story

PHP fixed two critical remote code execution flaws on Oct. 21, 2026, after researchers traced a related memory-handling problem back to 2004.
Leaked Private Keys For Eight CA Certificates Let Any Attacker Impersonate Any Domain

Leaked Private Keys For Eight CA Certificates Let Any Attacker Impersonate Any Domain

Eight exposed intermediate CA private keys could enable attackers to impersonate websites or sign malware as legitimate software, Tom’s Hardware reports.
GitLab Critical Patch Release

GitLab Critical Patch Release

GitLab released patches for supported CE and EE versions on Oct. 21, 2026, fixing a critical regular-expression flaw and other security issues.
Why Stolen AI Tokens Have Value On The Black Market

Why Stolen AI Tokens Have Value On The Black Market

Railway says customer environment variables may have been accessed. The incident highlights why AI keys can be valuable and what remains unknown.
What A Burst Of AI Security Headlines Reveals About Online Systems

What A Burst Of AI Security Headlines Reveals About Online Systems

A cluster of security disclosures highlights risks in software runtimes, certificate keys, cloud data, packages and AI-enabled attacks.
A Privacy Company Just Saved The Clearest Flock Surveillance Map I’ve Seen

A Privacy Company Just Saved The Clearest Flock Surveillance Map I’ve Seen

Proton is hosting a free Flock camera map created by researcher Joshua Michael, adding protection after Flock sought its removal.
5 Best Halloween Motion Sensor Lights in 2027

5 Best Halloween Motion Sensor Lights in 2027

Compare five Halloween motion sensor lights, from oversized glowing spider webs to solar smart spotlights, and find the right fit for your yard.
PHP2Shell And A Node.js Security Release On The Same Day: What To Patch, Restart And Check Now

PHP2Shell And A Node.js Security Release On The Same Day: What To Patch, Restart And Check Now

PHP and Node.js shipped security fixes on Oct. 21. Check affected runtimes, install fixed packages and restart services to put patches into use.
PHP2Shell Exposes Critical PHP Flaws As Dutch Government Websites Go Offline

PHP2Shell Exposes Critical PHP Flaws As Dutch Government Websites Go Offline

Dutch government sites like Overheid.nl and DigiD taken offline after PHP exposes critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619.