Go 1.27.3 and Go 1.26.10, released on October 20, make Go’s certificate verifier reject any certificate chain that passes through one of eight…
Tag: Patch & Updates
A patch only reduces risk when it runs in production
The patch was ready in days. It took months to ship. Why?I hear that question in nearly every customer conversation about vulnerability management. The…
PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers
PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers.…
OSCP+ Scoring Update: What You Need to Know
Learn all about scoring updates to the OSCP exam that are starting on December 1, 2026.
Microsoft Warns Windows Server Updates May Disrupt Exchange Email — Here’s the Workaround
Microsoft’s October Windows Server updates may disrupt Exchange email. Here’s what administrators need to know about the temporary workaround.
Google Upgrades Chrome With Gemini AI to Detect Fake Antivirus and Browser Update Scams
Google has upgraded Chrome’s Enhanced Protection mode with a more powerful Gemini AI model to detect fake antivirus alerts, browser update scams, and…
Node.js Releases Security Updates to Fix High-Severity TLS, DNS and Brotli Vulnerabilities
Node.js has released security updates for its 26.x, 24.x, and 22.x branches to address ten vulnerabilities, including four high-severity flaws affecting…
PHP2Shell: Why websites are going offline for emergency security updates
Websites are temporarily going offline as admins address two critical PHP flaws that could let attackers run malicious code on their servers.
PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now
The PHP project has released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can…
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications.
Microsoft Edge Is Testing Restart-Free Security Updates: What Works Now
Microsoft has demonstrated Edge updates without restarts, but the feature is still a prototype. Here is what users and IT teams can enable today.
Patch Now: php2shell: What We Know About the Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
Initially published Oct 21st at 6 AM PT- last updated 8:40AM PT Patch Now: Ensure you are up to date with the latest version and use this link to patch…
PSA: Patch your Plex media server before someone hacks it
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
Security patches need patches now that attackers have AI
Terra finds sharp rise in GitHub security fixes reported broken within 90 days
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server.…
PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched
Websites down as precaution as exploits have already been published
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and…
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report
AOMEI Backupper update servers hijacked to push malware: Check your PC
Attackers tampered with AOMEI Backupper’s update system to deliver malware that could give them remote access to users’ PCs.
PHP2Shell: Critical PHP vulnerabilities patched, update now!
The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that…