On November 3, Binance published its initial report on the October 29 attack that took about US$6.34 billion in digital assets from its hot wallets. Binance says it's covering the loss for its users, and about $2.85...
A week after PHP2Shell, there's another bug with a "2Shell" name, and this one is already on CISA's list of exploited vulnerabilities. CVE-2026-111497, which researchers are calling Node2Shell (some also call it...
On October 21, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two vulnerabilities that can let an attacker run code on a server without logging in. Researchers are calling them PHP2Shell. The PHP...
Joomla 6.2 came out on October 13, 2026. Most of the coverage has focused on TinyMCE changes, which are nice, but they aren't the reason we'd move client sites to it this fall. The reason is one line under the Email...
When OpenAI launched its new 'always-on' agents last month, one of its examples was about an invoice. An early tester's agent noticed he'd forgotten to bill a publication, put the invoice together, and sent it once he...
PHP 8.2 reaches end of life on December 31, 2026. That gives sites running on it just under three months of security patches before free updates stop. We're writing this now because the last two weeks of December are a...
As of September 11, 2026, part of the EU Cyber Resilience Act is already in effect.
Most of the CRA's requirements do not start applying until December 11, 2027. The reporting obligations in Article 14 started...
AI detection tools show up everywhere now. Teachers run essays through them, editors check submissions before publishing, and some hiring managers paste cover letters in to see if the candidate wrote their own. Paste...
Unfortunately, this isn't a theoretical risk. Attackers are actively scanning internet facing WordPress and Joomla installations right now, looking for specific vulnerabilities, and deploying webshells when they find...
We use cookies to improve your experience and deliver personalized content.
Learn more.
WyldAPI Modular API Services
A collection of utility APIs for product teams who don’t want to maintain this stuff in-house. Clean responses, stable endpoints, and no extra overhead.
