#live

Cyber security

PHP 8.5.12 fixes two critical pre-auth RCEs: update now

Two PHP flaws rated 9.2, CVE-2026-109618 and CVE-2026-109619, allow unauthenticated RCE before your code runs. Fixed in PHP 8.5.12 and 8.4.27.

Data Today Security Desk · Oct 21, 2026

Engineering

Miasma worm: live coverage of the Red Hat npm attack

Hijacking Red Hat's GitHub Actions OIDC publishing, the Miasma npm worm shipped 96 backdoored versions whose preinstall hook steals and spreads secrets.

Data Today Engineering Desk · Jun 12, 2026