PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Read the full story on Ars Technica.
More from this category
Cybersecurity
Stolen UpdraftCentral keys used to backdoor WordPress sites
A threat actor breached TeamUpdraft’s website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites.
Cybersecurity
Mozilla, Google, Apple block compromised eMudhra CA certificates
Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys were so weak that anyone could recover them almost instantly and use them to forge trusted certificates for legitimate websites.
Cybersecurity
Trump officials asked CISA to secretly hack a voting machine — and not disclose any vulnerabilities they found
The vulnerabilities were not to be disclosed to anyone outside the White House, CISA was told.
Cybersecurity
Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys
Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it’s unclear how the keys were compromised.
Cybersecurity
Update now: Hackers are exploiting Plex server vulnerabilities to install malware
Hackers are actively exploiting security vulnerabilities in outdated Plex Media Server installations to deploy cryptocurrency miners and proxy malware. Plex confirms widespread attacks against internet-facing servers, with the flaws allowing remote code execution without authentication.
Cybersecurity
PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure.
Latest from Ars Technica
General Tech
Merging SpaceX and Tesla would be a “good idea,” Musk says
“I do think there’s a lot of merit to combining the companies.”
General Tech
Cops raid office of RFK Jr. allies planning “unethical” vaccine trial on babies
Guinea-Bissau police said hepatitis B vaccine doses were taken as part of an investigation.
Gaming
Microsoft reportedly projects $1,200 to $1,800 price for 2028 Project Helix
Xbox maker is also apparently planning its own gaming handheld for next year.
General Tech
JustWatch, which tackles streaming fragmentation, launches own streaming service
A lifetime ad-free subscription is available.
Latest digest
Week 42
EN
Popular stories
Sources
72 active sources
27 Turkish · 45 English
All sources
