By Gowri Shankar Balasubramaniam, it application security manager
PHP2Shell is a pair of critical vulnerabilities in the PHP runtime, rated CVSS v4.0 9.2, that let unauthenticated attackers execute code on web servers. Apache mod_php can be exploited before any application code runs. This advisory covers affected versions, how each attack chain works, patching, interim php.ini mitigations, detection and compliance impact.
11 min read
CVE-2026-109390 is a critical (CVSS 9.8) flaw in AnyDesk for Linux 8.0.0–8.0.2 that lets unauthenticated attackers run code as root. Public exploit code is available. Learn which versions are affected, how to patch to 8.0.3, and how to detect signs of compromise.
4 min read
The Novalnet payment guarantee is a service in which Novalnet AG, a BaFin-licensed payment institution, covers the risk of customer non-payment on approved invoice and SEPA Direct Debit orders. Merchants receive the full order amount even if the customer never pays. It applies to B2C customers in Germany, Austria and Switzerland and B2B customers in the EU and Switzerland, for EUR orders from EUR 9.99.
7 min read
Stalwart or Zimbra? A security-focused comparison of architecture, exploitation history, licensing and cost, with a clear verdict on which self-hosted mail server to run in 2026.
8 min read
Germany has arrested an alleged core Qilin ransomware member extradited from Japan. Learn what it means for the RaaS threat and how to defend your organisation.
5 min read
Starting February 10, 2027, Let’s Encrypt will issue 64-day certificates by default, with 45 days to follow in 2028. Most automated setups will be fine, but hardcoded renewal schedules, manual processes, and forgotten appliances will not. This post explains the change and how to prepare.
7 min read
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.
2 min read
Learn the purpose of common email server ports, including SMTP 25, 465, 587, IMAP 143 and 993, POP3 110 and 995, and essential email security practices.
9 min read
Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function.
2 min read
ShinyHunters claims it stole CyrusOne contracts, floor plans and access records. What the alleged breach means for data center operators and their tenants.
3 min read
Some budget Android phones are compromised before they leave the box. The Midnight Mimosa campaign puts malicious code directly into device firmware, where it gains system-level privileges, commits ad fraud, and turns phones into residential proxies. This post explains how the framework works, why it is a supply-chain risk for enterprises, and what users, security teams and procurement leaders should do.
7 min read
Seen Novalnet AG on your bank statement? Learn what Novalnet is, why it appears instead of the merchant, and what to do if you don't recognise the charge.
6 min read
