AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
My Firewall Caught My Prompt Injection
I've learned a lot about computer science this year, and large language models have been useful tool…
AI Coding Agent Security: GitSpawn, Plugin Hijacks and What Developers Should Do Now
AI coding agents now read our repos, run our commands and install our plugins. That is exactly why s…
Outlook 550 5.7.515: "sending domain does not meet the required authentication level"
If Outlook.com or Hotmail rejects your mail with 550 5.7.515 Access denied, sending domain [yourdoma…
PHP emergency patch (PHP2Shell): how to check and patch your servers
On 21 October 2026 the PHP team released emergency updates for two critical vulnerabilities (CVE-202…
Three critical NGINX flaws: less dramatic than PHP2Shell, but patch them quickly anyway
A sysadmin never quite sleeps. PHP has barely been patched and F5 reports three critical flaws in NG…
Oracle Manipulation Risk Report: Gate
Oracle Manipulation Risk Report: Gate Target Protocol: Gate (TVL: $7671.7M) Oracle Manipulation R…
CVE-2026-114055: CVE-2026-114055: Uncontrolled Resource Consumption in vLLM via Unvalidated Multimodal Kwargs
CVE-2026-114055: Uncontrolled Resource Consumption in vLLM via Unvalidated Multimodal Kwargs Vuln…
The update button is part of your attack surface
For about six months in 2025, the servers that delivered Notepad++ updates weren't entirely in the m…
Security news weekly round-up - 23rd October 2026
Whatever you have that is reachable from the internet, just so you know, someone out there will try …
Node2Shell (CVE-2026-111497): The Node.js Brotli RCE You Need to Patch Today
On October 21, Node.js shipped security releases for a flaw that deserves your immediate attention: …
How to Check SPF, DKIM and DMARC Records in 10 Minutes (and Fix the Common Mistakes)
Here is a deliverability problem I see a lot: a business says its invoices "just stopped arriving," …
![[CVE-2026-109618&CVE-2026-109619] No Login Required: Inside PHP2Shell, the 9.2-Severity Bug That Let Anyone Take Over Your Server](https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2F8k7h73zco1l2qbmc8k4l.png)
[CVE-2026-109618&CVE-2026-109619] No Login Required: Inside PHP2Shell, the 9.2-Severity Bug That Let Anyone Take Over Your Server
1. What is PHP2Shell? Item Detail Nickname PHP2Shell CVE IDs CVE-2026-109618, CVE-2026-10…