PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Tech news from the best sources
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
A simple email gives the attackers the ability to remotely inject OS commands.
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
Secret parameter allowed hackers to steal passwords when a target clicked on a link.
Screen-sharing bug lets remote hackers log in without a password.
Baseboard management controllers from the world's biggest manufacturers are a security mess.
Exploits can give persistent server access that survives credential rotation and disk re-imaging.
Both vulnerabilities allow untrusted users to gain root privileges.
Google publishes exploit code before patch, reported 29 months earlier, is fixed.
Production-version patches are coming online and should be installed pronto.