php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Ghosts in the Machine: Tampering...

In horror movies, the scariest threats aren’t the ones kicking down the front door – they’re the ones already inside, the ghosts hiding in the walls that nobody noticed. Modern...

How Attackers Abuse Entry Points...

Supply chain attacks have become a growing concern, particularly with the rise of open source packages and libraries across various programming languages. These attacks exploit vulnerabilities in the software supply...

Navigating the Java Supply Chain...

The modern software development ecosystem is intrinsically interwoven with libraries and dependencies. While this interconnectedness fosters efficiency and productivity, it can also introduce vulnerabilities, as vividly demonstrated in the case...

Securing Your Java Supply...

The software development ecosystem is more interconnected than ever before. With countless languages, libraries, and dependencies, it becomes incredibly difficult to manage them all effectively, especially from a security standpoint....