PHP2Shell: critical PHP flaws let attackers take over websites
Two flaws in PHP itself allow remote code execution without logging in. Attacks were seen before the fix came out.
Threats feed
What is happening, in plain language
What happened, whether it affects you, and what to do.
Plex Media Server flaws are being actively exploited
Four Plex Media Server flaws were added to the US list of known exploited vulnerabilities. Common on office NAS boxes.
Record Microsoft update fixes an actively exploited Windows flaw
Over 1,400 fixes, including a Windows bypass of the "downloaded from the internet" warning.