CISA has updated this Alert to: (1) provide a SIGMA detection rule to help identify potentially suspicious activity; (2) incorporate partner resources; and (3) reinforce existing mitigation guidance.

The PHP project has released fixes for a critical out-of-memory (OOM) memory-corruption flaw, tracked as CVE-2026-109618. It ...

The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities ...

The PHP team has released updated Windows builds to fix a serious flaw known as HTTP2Shell. The new packages are PHP 8.5.12-1 ...

A critical vulnerability was found in PHP.A patched version was released, so I'm updating it.I understand up to this ...

In the previous article "What did 'PHP2Shell' leave behind for us?", we summarized the overall picture of the critical PHP ...

The PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 on October 21, 2026, to address two critical PHP2Shell ...

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...

Optimum7 published a guide to writing an ecommerce RFP on Oct. 28, with a B2B ecommerce RFP template covering PHP version, hosting environment, platform compatibility and post-launch maintenance ...

Google urges Cloud customers to patch critical PHP flaws affecting versions dating back to PHP 5.4. Here are the fixes and affected services.

OpenAI calls PHP2Shell ‘one of the most impactful security issues in recent memory’, and says frontier AI found it before attackers did.

Hackers have started exploiting serious security flaws in PHP, a programming language used by millions of websites worldwide.