php2shell: PHP's Pair of Critical Remote-Code-Execution Bugs and Why Every Site Must Patch
Two unauthenticated RCE flaws hit PHP, the backbone of ~70% of the web. Updates are out now — here's what happened.
Two unauthenticated RCE flaws hit PHP, the backbone of ~70% of the web. Updates are out now — here's what happened.
AI agents that can run code and call services are powerful — and dangerous when over-privileged. OWASP's new 2026 rankings and a sweeping MCP audit show why least privilege matters again.
A plain markdown file is now the default way to tell a coding agent how your project works—and it just gained a neutral home.
OpenTofu 1.13 adds functions to resolve unknowns at plan time — the clearest sign yet that the Terraform fork is running its own roadmap.
PostgreSQL 19 pulled an unusually large batch of features during beta — and the project's new AI-assisted code review is part of why.
A 2026 field guide to in-browser inference: WebLLM, transformers.js, and the WebGPU that finally makes a 2B model run in a tab.