Opens in a new tab

Blog

Windows Server 2025 quick recovery restoring a failed server rack
October 23, 2026

Windows Server 2025 Gets Quick Machine Recovery Support

Windows Server 2025 supports quick machine recovery after the October 2026 update. IT teams should check policy, update access, backups and out-of-band access.
ConnectWise cloud backup server disconnected after Microsoft 365 credential incident
October 22, 2026

ConnectWise Disables Cloud Backup After Microsoft 365 Credential Incident

ConnectWise disabled Cloud Backup and related services after unauthorized access affected application identities linked to Microsoft 365 tenants.
Vault door cracking open to illustrate critical PHP vulnerabilities
October 22, 2026

Critical PHP Memory Corruption Flaws: What Small Businesses Should Do Now

Two critical memory corruption flaws in PHP's request handling could let attackers run code on affected servers. Here's how to check your systems and apply the
DeepSeek ban depicted as AI whale locked inside federal vault
October 22, 2026

Trump administration orders DeepSeek banned from federal civilian agencies

Federal civilian agencies must remove DeepSeek products and stop purchasing them under a DHS order targeting supply-chain, data and security risks.
Shattered digital padlock representing compromised TLS certificates
October 21, 2026

Internet on high alert after 8 compromised TLS certificates discovered

Eight weak eMudhra TLS certificate keys could enable trusted credentials for any site. Small businesses should check browsers, VPNs, apps and updates.
Daily security briefing highlighting cracked blue-lit servers and critical vulnerabilities
October 21, 2026

Daily Security Briefing: Wednesday, October 21, 2026

9 security issues from the last 24 hours: PHP2Shell: PHP schedules emergency patches for two critical RCE flaws; CISA adds Plex, Siemens and SiteGuard flaws to
DeepSeek removed from federal civilian systems shown as broken processor chip
October 21, 2026

U.S. Orders DeepSeek Removed From Federal Civilian Systems

A federal order removes DeepSeek from U.S. civilian systems and bans new purchases. Contractors may also need to review their supply chains.
PHP security release depicted by cracked servers with blue flames
October 21, 2026

PHP security release fixes CVE-2026-109618 and CVE-2026-109619: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35

PHP patched two critical unauthenticated RCE flaws on October 21, 2026. Find out if your server is affected and the exact steps to update safely.
Critical PHP vulnerabilities exposed on a cracked server rack
October 21, 2026

Critical PHP Vulnerabilities Patch Now: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 Released for Two Unauthenticated RCE Flaws

PHP has fixed two critical unauthenticated remote code execution flaws. Update web-facing PHP installations to the patched release for the installed branch.