01
Security
IT teams scramble to patch critical PHP flaw as no large breaches are confirmed
Patching is slow for sites on older PHP versions, and an early warning of a working exploit was withdrawn.
Patching is slow for sites on older PHP versions, and an early warning of a working exploit was withdrawn.
Organisations are still checking exposure, and experts warn the fallout may take months to fully emerge.
Defenders should not treat the public disclosure date as the earliest point at which the flaws were exploited.
Millions of exploit attempts have been logged, but it is unclear whether any attack has succeeded, and only the latest PHP release carries the fix.
Operators running PHP 8.1 or older face the most pressing risk, since no official fix is coming for those versions.
Affected servers need patches for a PHP bug, and some certificates from one authority may still be trusted by a macOS utility.
Operators running PHP on public sites face urgent patching, and no temporary workaround fully blocks the attacks.
The funding gives the web traffic security startup more room to expand through its partner channel across four regions.
Meta says the system will let glasses handle more advanced AI features in the cloud without direct access to sensitive data.
The stable release broadens where the toolchain fits into existing workflows and adds more visibility for setup and Git hooks.
Cloudflare, NetBlocks and Yandex’s own status page point to a broad outage that has taken many services offline and cut traffic across the company’s network.
The beta gives teams a wider OpenTelemetry view of request handling, while pricing for existing tracing users changes on December 1, 2026.
Cloudflare’s new streaming service is live in beta, with pricing set and Kafka compatibility planned later.
The 9B and 27B models are available in Workers AI and on Hugging Face, with a faster Flash variant for lower-latency decisions.
The new tool is meant to take over from Wrangler and will give teams a longer runway before the old CLI is retired.
The fix closes a storage-layer leak in Workers Paid containers and shows that isolation still depends on what happens beneath microVM boundaries.
The move could let more sites adopt post-quantum authentication without changing how older clients connect.
Python now joins Cloudflare’s serverless platform, but maintainers and rivals are probing security and startup lag.
The fix closes a route that could have let one customer recover another account’s residual data.
If enacted, it would extend potential blocking orders to VPN and DNS services, not just ISPs.
A leaner cache layout frees about 100 TB of RAM and makes Cloudflare’s 1.1.1.1 resolver faster under load.
A long-used placeholder host in web docs now points to attacker-controlled infrastructure serving a malicious Windows ClickFix flow.
The findings point to a possible future risk for stored traffic, not an immediate break of common website or remote-access systems.