Section

Security

Vulnerabilities, breaches and what to actually do about them.

PHP2Shell: the PHP bugs being exploited right now, and exactly how to check and patch

Two critical flaws in PHP's default upload-progress feature allow unauthenticated remote code execution. Here are the fixed versions, a one-line check, and the config change that buys you time.

3d ago · 2 min read

Security

A rogue AGENTS.md in your Downloads folder can hijack Codex and Claude Code. Here's how to lock it down

Researchers found a malicious instruction file that tricked a coding agent into installing an unauthorized npm package — and reproduced it with a 90% success rate. Five settings that close the hole.

4d ago · 2 min read