Patch/Configuration Management

An exploited Brotli bug can crash an app, leak sensitive data, or hand an attacker code execution on a server.

PHP2Shell exploits are emerging, but widespread attacks remain unconfirmed as scanning surges.

In a report by Coin Central, the XRP Ledger has rescheduled the activation of its Cleanup3_4_0 bug fix to Nov. 4 after validator support temporarily dipped below the required threshold.

Arista Networks has released critical security updates to address an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator on-premises deployments, according to a recent report by Bleeping Computer.

PHP2Shell attacks spread worldwide as governments rush to patch and legacy systems remain exposed.

Here’s a handy checklist for security teams mitigating PHP2Shell.

Based on information from The Register, the curl project is changing how it handles security vulnerability reports to manage an overwhelming influx of submissions.