October 29, 2019

PHP team fixes nasty site-owning remote execution bug

The PHP development team has fixed a bug that could allow remote code execution in some setups of the programming language.

Naked Security

March 28, 2019

Is your e-commerce site being used to test stolen card data?

If you're running Magento you should be on the look out for hackers testing stolen card data - it could get your PayPal account suspended.

Naked Security

March 21, 2019

Flaw in popular PDF creation library enabled remote code execution

A researcher has discovered a high-severity bug in a popular PHP library used for creating PDFs.

Naked Security

November 21, 2018

Hackers erase 6,500 sites from the Dark Web in one attack

Dark Web hosting company Daniel's Hosting was wiped out, taking down about 30% of the Dark Web's operational and active hidden services.

Naked Security

October 22, 2018

Popular website plugin harboured a serious 0-day for years

The flaw in the popular file uploader allows an attacker to upload files and run their own command line shell on any affected server.

Naked Security

August 30, 2018

How one man could have pwned all your PHP programs

Popular PHP package repository front end Packagist turned out to have an embarrassing command injection hole - now closed!

Naked Security

February 21, 2017

News in brief: Concern about Windows 10; Hacks cost Yahoo; PHP gets better crypto

Your daily round-up of some of the other stories in the news

Naked Security

March 02, 2016

PHP ransomware attacks blogs, websites, content managers and more…

We've had ransomware for Windows, Android, Linux, and even MS-DOS. Now there's ransomware in PHP, designed to hold your web server hostage.

Naked Security