The US cyber agency has added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities Catalog.
For the past week, software engineers around the globe have been scrambling to update the backend of websites after a team ...
An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
Microsoft and the PHP project have released fixes for the Google Brotli decoder flaw, CVE-2026-111497, after Node.js patched ...
PHP releases rebuilt Windows security updates for versions 8.2 to 8.5 to patch a critical Brotli compression library flaw ...
Hackers exploit logged-in WordPress admins' browser sessions to install hidden PHP backdoors without stealing passwords.
The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1 ...
Honeypot data shows attackers successfully exploiting the PHP2Shell vulnerabilities to execute shell commands on PHP servers.
Datalink Networks, a nationally recognized managed services, cybersecurity, cloud, and IT consulting provider, today addressed a series of significant cybersecurity vulnerabilities affecting widely ...
Securonix Threat Research has analyzed TRUST#GRAFT, an attack chain that uses fake Cloudflare verification pages to turn ...
PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code ...