Articles tagged #web-security.
2 articles
- PHP2Shell: Two Critical PHP Vulnerabilities Could Allow Remote Code Execution
PHP has released emergency security patches for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. Both vulnerabilities have a CVSS score of 9.2 and could allow unauthenticated attackers to execute arbitrary code on vulnerable servers. Developers and system administrators should update to patched PHP versions immediately and investigate potentially
- Passkeys: A Simpler and Safer Way to Log In
Passkeys are the next step after passwords. Instead of remembering a secret, your device uses cryptography to prove your identity. They resist phishing and credential theft, are unique to each service, and don’t require websites to store your password.