← Blog
Security
2026-10-21Patching and mitigating PHP2ShellWhat PHP's two PHP2Shell advisories say, who is exposed, the fixed versions, config and proxy mitigations, and compromise checks for PHP servers.→2026-10-20The weak eMudhra intermediate CA keysHow eight eMudhra CA keys ended up under 256, the 2025 CRL bug that hinted at it, who blocked them, and how to test and fix curl, Python, Go and Docker.→2026-10-20PingCAP's TiDB Cloud breachWhat PingCAP confirmed about the TiDB Cloud breach, what FulcrumSec claims, why nothing alerted, what customers should rotate, and GCP and Azure checks.→