Two critical remote code execution (RCE) flaws dubbed "PHP2Shell" have hit the core PHP programming language, triggering ...

Two flaws expose PHP web servers to remote attacks. Versions from the past 20 years are affected; admins should patch.

The configured form-field name is normally PHP_SESSION_UPLOAD_PROGRESS. When the relevant multipart request conditions are met, the parser may invoke PHP’s upload-progress handling. The PHP manual ...

Two critical PHP remote code execution vulnerabilities will be patched in an emergency release on October 21. Fixes are only expected for supported PHP 8.x branches.Key takeawaysCVE-2026-109618 and ...

Coding agents trip over PowerShell and hang on dev servers. Four fixes that hold on Windows: argument arrays, hooks, process ...

The net runs on code, cables and late-night decisions, backed by legacy fixes, hidden dependencies and shell scripts nobody wants to touch.

Security researcher Quentin Kaiser detailed the flaw at the Hexacon conference in Paris on October 16. He calls it WPSplinter ...

A Chinese-speaking hacker let AI agents on the Cairn platform attack more than 1,200 sites from September 25, breaking into ...

Attackers exploit four Plex Media Server flaws chained as Plex2Shell to deploy XMRig miners and reverse proxy software after ...

Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise.

Claude Code 2.1.302, Codex CLI 0.163.0, OpenCode 2.0, and VS Code 1.141 all shipped AI coding agent updates in the same week ...