top of page
News and Updates
A major PHP vulnerability is live. Check if your website is exposed for free, in 30 seconds.
A pair of critical PHP flaws (PHP2Shell) are being scrambled on across the web right now — I've written up what they are and why they matter separately. The practical question for most site owners is simpler: is my site exposed? So we built a free tool, phpexposurecheck.com, that answers exactly that, in about 30 seconds, without scanning or touching your server.
30 minutes ago3 min read
PHP's Critical Vulnerability: The Week the Web's Workhorse Became Its Weak Point
Governments across the world including Australia pulled websites offline this week after two critical flaws were disclosed in PHP, the open-source language behind most of the web. The bugs, tracked as CVE-2026-109618 and CVE-2026-109619 and nicknamed "PHP2Shell", let an attacker take control of a web server without logging in.
1 day ago8 min read
bottom of page