Blog

Security news and explainers, written from primary sources such as vendor advisories and CVE records.

PHP2Shell: why updating WordPress doesn't fix it — checks, mitigations, and post-update review, shown with lab logs

The critical PHP runtime flaws PHP2Shell (CVE-2026-109618, CVE-2026-109619), shown with logs from an isolated lab: checking your version, what mitigations cover, and what to look for after updating.

2026-10-25

Notice

"Know the attack, defend with how it works." Launching the Mamoru Hacker archive

We have opened the official website and technical archive of the YouTube channel Mamoru Hacker. This post defines what the site will publish and the three policies behind everything we post.

2026-10-24