php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Software Supply Chain Security Tools...

Key Takeaways Most software supply chain security tools tell you what already made it into your build, and far fewer stop it from getting there in the first place. The...

How Attackers Abuse Entry Points...

Supply chain attacks have become a growing concern, particularly with the rise of open source packages and libraries across various programming languages. These attacks exploit vulnerabilities in the software supply...

PyPI Malicious Package Uploads Used...

In light of the recent cybercriminal activity, new user sign-ups on the PyPI platform were halted. Currently, an increase in PyPI malicious package uploads is being deemed the reason behind...