Last updated 8 September 2026. This story is moving quickly and this article will be updated as Adobe and Sansec publish more. The first confirmed victim of last week’s Magento attacks was fully patched: version 2.4.6-p15 with the July and August 2026 security updates applied. That is the fact to sit with, because it removes […]
News
24
Aug
Aug
Your website has a contact form, and somebody can probably attach a file to it: a CV, a photo, a quote request in PDF. That form is a door. It accepts a file from a complete stranger, decides whether the file is acceptable, and saves it into a folder that your web server will happily […]
10
Aug
Aug
WordPress 7.0.3 shipped on 6 August 2026, a security-only update that closes twelve separate holes, and the most serious of them needs nothing from an attacker but a well-crafted link and one click. You do not need to be running a badly built site to be caught by it. You do not need a vulnerable […]
27
Jul
Jul
On 24 July 2026, Amazon Web Services lost connectivity to one of its busiest regions for eighty minutes, and Apple Pay, Reddit, Hulu, DoorDash and the PlayStation Network all went dark at the same time. It was the third significant AWS reliability incident in about three months, and it landed in the same fortnight that […]