4 articles
Two flaws in PHP itself let unauthenticated attackers run code on web servers, and CISA confirms they are exploited. What is affected, how to check your PHP version, and how to patch or mitigate.
A remotely reachable use-after-free in the Linux kernel's IPv4 TCP handshake, present since kernel 4.4. How serious it is, how to check your kernel, and how to patch, livepatch or mitigate it.
Next.js 16.4.5 and 15.5.29 fix seven vulnerabilities, mostly cache bugs that can leak one user's or tenant's data to another. Which apps are affected and how to upgrade safely.
A critical Remote Code Execution (RCE) vulnerability dubbed 'React2Shell' has been discovered in Next.js, affecting versions using React Server Components. Learn how to protect your application.
Tell me about your site and goals. I will tell you what I would change and what it would take.