In the latest software supply chain attack, the official PHP Git repository was hacked and the code base tampered with. Yesterday, two malicious commits were pushed to the php-src Git repository ...

A new PHP for Windows remote code execution (RCE) vulnerability has been disclosed, impacting all releases since version 5.x, potentially impacting a massive number of servers worldwide. PHP is a ...

Tempest 3.0 has been released. The still quite young PHP framework brings a new exception handler, performance optimizations, support for PHP 8.5, and numerous detailed changes. The project has 2100 ...

A weakness in the manner in which PHP handles hashed strings in certain situations gives attackers an opportunity to try and compromise authentication systems, passwords, and other functions involving ...

One thing you can say for PHP is that it’s persistent. Like many long-standing programming languages, it’s often maligned by developers who would like to see a shift to newer candidates, yet it also ...