RSS
Gootloader inside out
Threat Research
PHP Packagist supply chain poisoned by hacker “looking for a job”
Naked Security
SHA-3 code execution bug patched in PHP – check your version!
Poisoned Python and PHP packages purloin passwords for AWS access
Irony alert! PHP fixes security flaw in input validation code
S3 Ep31: Apple zero-days, Flubot scammers and PHP supply chain bug [Podcast]
PHP community sidesteps its third supply chain attack in three years
S3 Ep26: Apple 0-day, crypto vulnerabilities and PHP backdoor [Podcast]
PHP web language narrowly avoids “backdoor” supply chain attack