Everything Threat Times has reported about PHP: 3 stories, newest first. Part of our Vulnerabilities coverage.
The cybersecurity firm explains why the vague HTTP status code often hides critical issues, including malicious activity, and offers troubleshooting steps for administrators.
A critical vulnerability in Omnispace Agora Project allows attackers to predict default account passwords, enabling unauthorized access prior to legitimate user login.
A quadratic-time denial-of-service flaw in thephpleague commonmark allows unauthenticated attackers to exhaust PHP worker CPU resources via crafted input.