FACT FOCUS: False claims of rigged elections are limited as midterm vote heavily favors Democrats

After President Donald Trump said he accepts the results of his party's midterm route, many of his loyalists reluctantly ...

A Critical Vulnerability in PHP. Why I Still Choose PHP for the Backend

In October 2026, a critical vulnerability was discovered in PHP. This vulnerability, dubbed "PHP2Shell," was extremely serious, as it could potentially allow remote execution of arbitrary code without ...

The Risks of PHP and How to Address Them

First of all, PHP is not inherently a dangerous programming language. However, if security measures are insufficient, it can ...
InfoQ

PHP Patches Two Critical RCE Flaws That Were Already under Attack

PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code ...
The Tech Edvocate

9 Urgent Steps to Secure Your Website Against PHP Vulnerabilities Today

Spread the loveIf you’re running a website, especially one powered by PHP, you’ve likely felt a chill down your spine ...

When Cybersecurity Takes a Website Offline: How AI Can Detect PHP Vulnerabilities

Taking a website offline is not always a failure of cybersecurity. In some circumstances, it is a deliberate containment decision. If an application is actively exposing sensitive information or ...
arcticwolf

PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation attempts, Potassium botnet activity, and gives mitigation guidance.
The Tech Edvocate

Urgent: AI Just Exposed PHP Flaws — Here’s How to Lock Down Your Website Now

Spread the loveThe digital world is in a state of high alert, and if you manage a website, you should be too. A recent, ...
Notebookcheck

PHP2Shell: Critical PHP flaws hit mod_php servers hardest

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...
GitHub

PHP2Shell Validation & Defense Toolkit

Tooling to let operators check whether their PHP is exposed to PHP2Shell, apply interim mitigations across the whole stack, and detect exploitation — without shipping a weaponized ...
hostinger

Hostinger deploys protections against php2shell PHP vulnerabilities

On October 21, the PHP project fixed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, now known as php2shell. Both are rated 9.2 out of 10 on the Common Vulnerability Scoring System ...
dexpose.io

PHP2Shell: How Security Teams Should Assess and Contain the Reported PHP RCEs

The configured form-field name is normally PHP_SESSION_UPLOAD_PROGRESS. When the relevant multipart request conditions are met, the parser may invoke PHP’s upload-progress handling. The PHP manual ...