Insights, Guides and Newsroom

WordPress 7.2 Beta 1 is out, bringing a new Secrets API, a redesigned block

Node.js shipped 10 security fixes on October 21, 2026, including a critical Brotli decoder

PHP shipped emergency patches on October 21, 2026 for two critical unauthenticated RCE flaws

Ivanti patched an authentication bypass flaw in its Connect Secure VPN appliances on October

A supply-chain breach at Rank Math let malware ride along with Rank Math PRO

Attackers with stolen UpdraftCentral dashboard keys are installing backdoor plugins on WordPress sites running

Next.js patched two critical remote code execution flaws and a denial-of-service bug on October

A critical, unauthenticated file upload vulnerability in the Bricksforge WordPress plugin is being actively

Wordfence disclosed a critical Ghostscript vulnerability on October 12, 2026 that reaches WordPress through

Microsoft’s October 13 security update patched 1,413 CVEs, including a Windows Shell zero-day (CVE-2026-96951)

HPE has patched a critical, unauthenticated vulnerability in ClearPass Policy Manager, the network access

Chrome 155 patches 247 security issues, 4 of them critical, and two of the