Here’s Everything You Need to Know About the Recent PHP Vulnerabilities and How to Protect Your Site
Two critical PHP2Shell vulnerabilities could allow attackers to execute code on vulnerable web servers without authentication. Here’s what happened, which PHP versions are patched, and how website owners can protect their sites.
GitLab Patches Critical CVSS 10.0 Vulnerability Affecting Versions Since 2014
GitLab has patched CVE-2026-110264, a critical CVSS 10.0 vulnerability that could allow unauthenticated attackers to execute code on self-managed servers. The flaw affects releases dating back to 2014.
Open Source vs. Closed Source Software: What’s the Difference?
Discover the difference between open-source and closed-source software, including their security, cost, benefits, limitations, and popular examples.
PHP Releases Emergency Patches for Two Critical Flaws That Could Let Hackers Take Over Servers
PHP has released emergency patches for two critical PHP2Shell vulnerabilities that could let unauthenticated attackers execute code on vulnerable servers. Website administrators are urged to update immediately.
YouTube Introduces Temporary Feature Pauses to Protect Hacked Channels
YouTube is introducing a new security measure that temporarily disables certain channel features when it detects suspicious activity that could indicate an account has been hijacked.
Eight Compromised TLS Certificates Put Internet Security at Risk
Eight compromised eMudhra TLS certificates have triggered emergency security updates across major browsers, while outdated software and embedded devices could make the wider cleanup effort significantly more difficult.
TeamUpdraft Breach Exposes UpdraftCentral Keys, Putting WordPress Sites at Risk
A breach at TeamUpdraft may have exposed UpdraftCentral connection keys, enabling attackers to target connected WordPress websites with malicious plugins and administrator accounts.
Pegasus Spyware Infects Serbian University Rector’s iPhone, Citizen Lab Finds
Citizen Lab says Pegasus spyware infected the iPhone of Serbian university rector Vladan Đokić in 2026, while a senior prosecutor received Apple threat notifications.
YouTube Tests Moving Dislike Button Into Three-Dot Menu
YouTube appears to be testing a change that moves the dislike button on regular videos into the three-dot menu, according to screenshots shared by users online
Tesla Sets December Shareholder Meeting as Musk’s $158 Billion Pay Award Draws Attention
Tesla will hold its annual shareholder meeting on December 3, with investors voting on Elon Musk's re-election and executive compensation as his $158 billion stock award draws attention.
Hackers Claim SBI Customer Data Leak, but Breach Remains Unverified
A hacker group claims to possess more than 375,000 records and 2,722 documents allegedly linked to SBI, but the authenticity and origin of the data remain unverified.
Google Cloud Outage Disrupts Revolut as Services Begin Recovering
Google Cloud is working to restore services following a power-related outage in its London data center that disrupted Revolut and numerous other online services across the UK and Europe.
Revolut Outage Disrupts Card Payments and Banking Services Worldwide
Revolut suffered a major service outage on October 20, 2026, disrupting card payments, transfers, ATM withdrawals and other banking services amid a wider Google Cloud disruption.
Loading
