[Urgent] Critical Vulnerabilities in PHP, Java, Node.js, and Certificate Authorities | A Beginner's Guide to Types of Cyber Attacks and Zero-Day/N-Day Attacks

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP, ...

PHP Vulnerability Response: Are You Only Doing It for Work? A Checklist for Personal Sites and Development Environments

Thank you for your hard work dealing with the recent string of vulnerabilities. It is difficult to stay calm when you have to ...
PChome Online新聞

全球AI能力差距迅速拉近 加速市場競爭與資安風險

過去兩年，人工智慧（AI）模型發展主要集中於少數美國公司，形塑了市場對AI取得、風險及採用的認知。然而，最新趨勢顯示，AI能力的差距正以超乎預期的速度縮小，不僅重塑全球AI生態，也帶來了前所未有的機遇與挑戰。
cyberkendra.com

CVE-2026-91403: Oracle Java Emergency Fix for eMudhra CAs

Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.
cyberkendra.com

PHP2Shell: Critical PHP Flaws Allow Remote Code Execution

(CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal ...
Tweakers

PHP dicht twee kritieke lekken nadat wereldwijd websites offline werden gehaald

PHP heeft een patch uitgebracht om twee kritieke kwetsbaarheden te dichten. De makers adviseren gebruikers om direct een ...

Two web emergencies in one week: guessable certificate keys and critical PHP bugs that leaked before patches

Eight intermediate certificates issued by India-based certificate authority eMudhra were found to have private keys so weak they can be calculated from the certificates themselves. Those ...