Security alerts
What to fix right now.
Short alerts when an actively exploited flaw hits sites like yours: what happened, who is affected, how to check your site and what to do. Every alert cites its official sources.
PHP2Shell: two critical PHP flaws under attack, update now
Two flaws in PHP let attackers take over a server without logging in. Fixed on 21 October 2026. Who is affected, how to check, what to do.