Critical PHP Flaws Disclosed, Patches Out Now
The two flaws are CVE-2026-109618 and CVE-2026-109619 and are said to affect PHP versions 5, 6, 7, and 8.
All topics
Articles
186 Posts
Ongoing Microsoft 365 Campaign Abuses ConnectWise App
Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication.
The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
Nolan casts the invention of the Trojan horse as the ultimate violation of “Zeus’s law,” the idea that you should treat any stranger you encounter with kindness and respect, because they could very well be Zeus in disguise.
Ivanti Connect Secure Zero-Day Exploited in Attacks
Ivanti warns of active exploitation of CVE-2026-104935, a high-severity Connect Secure flaw.
Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
Two years after the largest healthcare cybersecurity incident in history, the senate has passed The Health Care Cybersecurity and Resiliency Act of 2025.
Patching Faster Has Never Been the Answer
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.