Today’s PHP security release, and how Thephp is strengthening security
Describing the story behind how critical security vulnerabilities were found and fixed.
Topic
Security
<p>Vulnerability research, defensive security, privacy and the changing mechanics of software risk.</p>
PHP 8.2.35
The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that…
Security advisory: Critical remote code execution vulnerabilities, update now
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
Apple broke an essential presentation feature of iPads
If you teach or present with an iPad, avoid iPadOS 27.
MiniMax M3.1 Flash
Today, Minimax officially roll out MiniMax M3.1 Flash. As a next-generation Flash model, M3.1 Flash delivers a generational leap in agentic tasks, coding,…
Someone on Torrent Sites Kept Fucking with Thereallo’s Sonarr
PLEASE stop putting skid malware on torrent sites as South Park episodes
AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware
This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. Citizenlab call the technique AdFection, and show how it…
Apple HomeView
Apple HomeView is a smart display with Siri AI, Liquid Retina display, high-fidelity audio, FaceTime, smart home controls, built-in privacy, and more.
Ledger confirms spy chip implant behind wallet crypto thefts
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users'…
Gemini 4 Argon
Announcing Gemini 4 Argon, Google’s frontier model for real-world coding, enterprise knowledge work, and cyber defence, rolling out soon.
Jury finds Facebook liable for deceiving users in Cambridge Analytica case
The two-week trial in New Mexico centred on accusations Facebook deceived users about a data breach.
Hawksley don’t like passkeys
Why passkeys are a step back for personal security: examining account lockout risks, platform lock-in, hardware key limits, and fragile recovery flows.