Breaking technology news, cybersecurity advisories, zero-day vulnerabilities, and fast-moving industry developments.
After critical PHP flaws disrupted banks, railways, and government sites, Japan says it will use AI to simulate cyberattacks on its own systems. Here is what was reported, what is still unknown, and what it means for web teams.
A critical flaw in a compression library can hide inside the runtimes you trust. Here is what the Brotli vulnerability means for Node.js, Bun, and Envoy users, and how to check whether you are exposed.
Patching PHP is not the end of the story. In two weeks, flaws also hit Node.js, Next.js, and a compression library hidden inside many tools. Here is what legacy code and hidden dependencies mean for web teams.
Two critical flaws in PHP itself, nicknamed PHP2Shell, can let attackers run code on a web server without logging in. Here is what happened, who is at risk, and the steps website owners should take today.
In October 2026, government portals across Europe and the globe were abruptly switched off. Behind the outages was PHP2Shell. Here is why agencies chose downtime over exposure.
A PHP flaw sat unproven for years until AI helped two research teams test it. Here is how researchers find and validate old bugs with AI, what the tools did, and what people still had to do.
