In October 2026, a critical vulnerability was discovered in PHP. This vulnerability, dubbed "PHP2Shell," was extremely serious, as it could potentially allow remote execution of arbitrary code without ...

First of all, PHP is not inherently a dangerous programming language. However, if security measures are insufficient, it can ...

A standalone Bash utility for finding PHP configurations and applying the temporary mitigation recommended by the PHP project: --check Default. Static inspection only; does not modify files.

Spread the loveIf you’re running a website, especially one powered by PHP, you’ve likely felt a chill down your spine ...

Taking a website offline is not always a failure of cybersecurity. In some circumstances, it is a deliberate containment ...

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...

Some organizations have temporarily taken websites and online services offline rather than leave potentially vulnerable ...

The configured form-field name is normally PHP_SESSION_UPLOAD_PROGRESS. When the relevant multipart request conditions are met, the parser may invoke PHP’s upload-progress handling. The PHP manual ...

Oct 19 (Reuters) - Primary Health Properties (PHP.L), opens new tab expects to receive £500 million ($666.55 million) from a joint venture deal with Singapore sovereign ‌wealth fund GIC that would ...

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue ...

Social media can provide instant access to large audiences and selected communities. It has helped some to stay connected during times of societal challenge, such as the pandemic and other disasters.