http://www.bing.com:80/search?q=PHP+vs+JavaScriptSearch resultshttp://www.bing.com:80/s/a/rsslogo.gifhttp://www.bing.com:80/search?q=PHP+vs+JavaScriptCopyright © 2026 Microsoft. All rights reserved. These XML results may not be used, reproduced or transmitted in any manner or for any purpose other than rendering Bing results within an RSS aggregator for your personal, non-commercial use. Any other use of these results requires express written permission from Microsoft Corporation. By accessing this web page or using these results in any manner whatsoever, you agree to be bound by the foregoing restrictions.https://www.schneier.com/blog/archives/2026/10/new-serious-php-vulnerabilities-released-and-patched.htmlPHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We ...Wed, 11 Nov 2026 17:49:00 GMThttps://www.schneier.com/AI Security Two weeks ago, I attended the [un]prompted AI security conference in San Francisco. It was an excellent event: three days of very dense talks about all aspects of AI security. (My talk was about integrous AI, and I will post it when it is online.) AI security can be divided into three broad topics. It’s important for researchers to understand which one they are working on. And it ...Wed, 11 Nov 2026 16:09:00 GMThttps://www.schneier.com/tag/patching/All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Mon, 02 Nov 2026 04:24:00 GMThttps://www.schneier.com/blog/archives/2021/04/backdoor-added-but-found-in-php.htmlBackdoor Added—But Found—in PHP Unknown hackers attempted to add a backdoor to the PHP source code. It was two malicious commits, with the subject “fix typo” and the names of known PHP developers and maintainers. They were discovered and removed before being pushed out to any users.Sat, 07 Nov 2026 05:08:00 GMThttps://www.schneier.com/page/2/All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed.Tue, 10 Nov 2026 04:43:00 GMThttps://www.schneier.com/blog/archives/2026/10/compromised-tls-certificates.htmlThe Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits ...Tue, 10 Nov 2026 18:47:00 GMThttps://www.schneier.com/blog/archives/2025/03/thousands-of-wordpress-websites-infected-with-malware.htmlBackdoor 2, which injects malicious JavaScript into wp-config.php Backdoor 3, which adds an attacker-controlled SSH key to the ~/.ssh/authorized_keys file so as to allow persistent remote access to the machine Backdoor 4, which is designed to execute remote commands and fetches another payload from gsocket [.]io to likely open a reverse shell.Mon, 02 Nov 2026 12:23:00 GMThttps://www.schneier.com/blog/archives/2019/04/maliciously_tam.htmlMaliciously Tampering with Medical Imagery In what I am sure is only a first in many similar demonstrations, researchers are able to add or remove cancer signs from CT scans. The results easily fool radiologists. I don’t think the medical device industry has thought at all about data integrity and authentication issues. In a world where sensor data of all kinds is undetectably manipulatable ...Tue, 06 Oct 2026 03:08:00 GMThttps://www.schneier.com/blog/archives/2026/10/backdooring-open-weight-ai-models.htmlBackdooring Open-Weight AI Models This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying what’s inside. Abliteration is a cheap fine-tune that takes ...Tue, 10 Nov 2026 00:47:00 GMThttps://www.schneier.com/blog/archives/2007/02/recognizing_a_s.htmlRecognizing a Suicide Bomber Fascinating story of an Israeli taxi driver who picked up a suicide bomber. What’s interesting to me is how the driver comes to realize his passenger is a suicide bomber. It wasn’t anything that comes up on a profile, but a feeling that something is wrong: Mr Woltinsky said he realised straight away that something was not quite right. “When he got into my car ...Sun, 18 Oct 2026 04:41:00 GMT