Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a t…
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The cr…
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in in denial of service, informati…
Release 1.6.19 Fix PHP Warning: Undefined variable $tmp_command in .../plugins/markasjunk/drivers/cmd_learn.php (#10294) Security: Fix CSS declaration smugglin…
Fedora released an update for php-pear-PHP-CodeSniffer (4.0.4) with security fixes and enhancements, emphasizing the need for users to promptly update due to v…
An update for PHP 8.4 on Rocky Linux 10 addresses a denial of service vulnerability and includes various bug fixes and enhancements, with a CVSS base score of …
Debian has released a security advisory for PHP 8.2, addressing vulnerabilities that could lead to denial of service and SQL injection. Users are urged to upgr…
Mageia 10 has released updates for php 8.4 to address multiple security vulnerabilities, as identified by CVEs CVE-2026-17544, CVE-2026-9672, CVE-2026-17543, a…
Oracle Linux 10 has updated RPM packages for PHP 8.4.23, addressing CVE-2026-14355, and is available for both x86_64 and aarch64 architectures through the Unbr…
Release 1.7.2 Add HEAD request handler to the static.php Fix so the oauth_password_claim claim is retrieved via token or userinfo request (#9631) Fix bug where…
It was discovered that a buffer overflow in the implementation of AES Key Wrap with Padding in the openssl extension of PHP, a widely-used open source general …
It was discovered that a buffer overflow in the implementation of AES Key Wrap with Padding in the openssl extension of PHP, a widely-used open source general …
CVE-2026-48907 in the Joomla JCE plugin lets unauthenticated attackers drop PHP web shells with a single crafted request. Here is how the attack works and how …
Drupal has issued an alert stating that it intends to release a "core security release" for all supported branches on May 20, 2026, from 5-9 p.m. UTC."The Drup…
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, SQL injection…
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, SQL injection…
The North Korea-linked persistent campaign known as Contagious Interview has spread its tentacles by publishing malicious packages targeting the Go, Rust, and …
Two vulnerabilities were discovered in phpseclib, a PHP Secure Communications Library. CVE-2023-52892 Some characters in Subject Alternative Name fields in TLS…
It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable…
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in server side request forgery or …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, ci…
Release 1.6.12 Support IPv6 in database DSN (#9937) Don't force specific error_reporting setting Fix compatibility with PHP 8.5 regarding array_first() Remove …
Release 1.6.12 Support IPv6 in database DSN (#9937) Don't force specific error_reporting setting Fix compatibility with PHP 8.5 regarding array_first() Remove …
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or memory disc…
