The VPN that passed its own health check
Ivanti Connect Secure zero-day chain (CVE-2026-104935 + CVE-2026-111357): root on a fully patched VPN appliance, no web shell, no file changes, and a clean integrity check.
Read the issue →Topic
Security
PHP2Shell: patch PHP itself, not just your website
Two critical flaws in the PHP engine let one unauthenticated web request run code on the server. Updating WordPress or a plugin won’t fix them. Updating PHP will.
Read the issue →