php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Keep Cloud Services FedRAMP Compliant...

Bad actors continue targeting government organizations these days. Along with increases in targeting technology, attacks focused on government targets nearly doubled in 2019 from 2017. Most notably, this included significant...

Reminder to upgrade old KernelCare...

If you are running kcarectl versions from 2.10-1 to 2.11-3, please upgrade to the latest version by...

Protecting Servers from HeartBleed. Yes,...

HeartBleed… kind of sounds like a love song from the 1970s. It’s not. HeartBleed is a serious vulnerability (CVE-2014-0160) affecting the OpenSSL shared library. It’s been around since 2014, but...

Ksplice: Overview of Enterprise Live...

  Before 2008, the only way to install new patches to Linux kernels was the yum update kernel command. It quickly became clear that those who use 24/7 servers would...

Best Practices for Compliance in...

The Industrial Internet of Things (IIoT or “IoT” for short) consists of billions of devices deployed across industrial facilities and public infrastructure. While a boon to productivity and data-driven business,...

Monthly KernelCare Update – October...

The KernelCare team strives to help make sure you never miss a critical patch. In October, we worked to provide you with simple instructions on how live patching of Linux...

Case Study: University of Zagreb...

Educational institutions are being hacked on a regular basis, and this trend shows no signs of improvement: over half (54%) of UK universities reported a data breach to the regulator...

8 Tools to Keep Linux...

Keeping Linux servers updated and patched isn’t the job of just one tool. You need several tools to ensure your servers are configured properly and aren’t a target for the...

Behind the Scenes at KernelCare:...

Testing is essential for any software update including patches, but it’s even more essential when changes are made to critical infrastructure that powers revenue-impacting services. Release of security updates that...

Tools for Meeting and Maintaining...

Meeting System and Organization Controls (SOC) 2 compliance is more than just a simple process implemented once to pass an audit. Permanent procedural changes are tedious and time-consuming but are...

Rebootless Patches for ‘BleedingTooth’ are...

Google security researchers recently found a flaw in the way the Linux kernel’s Bluetooth implementation handled L2CAP packets with A2MP CID.  A remote attacker in range could use this flaw...