// current vulnerabilities every working day
One important vulnerability in depth every working day. Why it is dangerous, who it affects, how to check whether you are hit and how to fix it. Written for IT admins and businesses, not for security researchers.
Two flaws in the PHP core let an attacker on the internet run their own code on a server without logging in. They are already being exploited. The only reliable protection is updating PHP to 8.2.35, 8.3.36, 8.4.27 or 8.5.12 and restarting every PHP process.
Articles are put together by an AI agent from public sources (vendors, CISA, ENISA, NVD, SK-CERT, NÚKIB), and version numbers and CVEs are checked against them automatically. Always confirm the steps in the vendor advisory before touching production.
I can help you find out which systems are affected, update them safely and check whether an attacker already got in. Let us start with an initial consultation, which is deducted from the project price if we work together.