PHP Critical Vulnerabilities Leaked Before Patch

Seven padlocks on a steel rail, three rusted and four brass, one with a blue tag, under the headline Critical PHP Flaws Leaked Before the Patch

Two critical PHP vulnerabilities leaked before their patch, early attacks are reported, and the EU’s CERT says internet-facing applications may need to be isolated until it is installed. PHP’s security team released the fix on October 21 at 14:00 UTC (16:00 CEST). Both flaws are rated CVSS v4.0 9.2, and researchers report remote code execution.…

Read More

OWASP Top 10 2021: Control Access, Encrypt Everything and Be Afraid of Design Flaws

DIESEC - Blog - OWASP Top 10 2021: Control Access, Encrypt Everything and Be Afraid of Design Flaws

OWASP released a new top 10. What does it mean for your application security? OWASP Foundation, the most authoritative organization in web-application security, released a new Top 10 of the current threats. The changes are significant and really impressive, sharply illustrating that since the COVID-19 outbreak the cyberspace has become an even more dangerous place,…

Read More