The National Cyber Security Centre (NCSC) has issued an alert about two critical vulnerabilities in the PHP scripting language, which is commonly used on websites and in web applications.

For fellow infrastructure maintainers, today marks just the beginning of what could be a series of AI-driven security challenges. Two critical security flaws have been discovered in all variations and ...

Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg ...

PHP shipped fixes for two critical PHP2Shell flaws a day early after a leak. The 14-year-old bug lets attackers run code on ...

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...

PHP Foundation rushes emergency fix for php2shell, two critical CVEs an AI helped uncover, as 1.5M hosts stay exposed.

PHP has released fixes for two critical vulnerabilities. This article explains how out-of-memory errors and internal state left over between requests enable attacks, why interim settings fall short, ...

Calif researchers used OpenAI's GPT-5.6 Sol to find PHP2Shell, severe PHP flaws affecting about 70% of websites, prompting an ...

As a casual internet user, you might be wondering what exactly the barrage of jargon like “RCE via OOM corruption” means, how concerned you should be, and how exactly a vulnerability this severe flew ...

Australia’s lead cyber security agency is among government websites across the world disrupted by “critical vulnerabilities” in background programming code that powers swathes of the web.

The maintainers of the PHP programming language today released patches for two critical vulnerabilities that affect up to 70% of the world’s websites. Several cybersecurity agencies including the NSA ...

Two critical PHP vulnerabilities could let hackers execute malicious code on web servers, prompting emergency patches and urgent warnings.