patching

紧急修复的两个关键 PHP 漏洞影响自 2004 年以来的所有版本，可能导致大规模远程控制攻击，促使全球政府和企业网站紧急下线并抢在攻击前打补丁。

两个评分高达9.2/10的PHP远程代码执行漏洞（php2shell）被公开，官方已发布紧急补丁版本，要求所有PHP服务立即升级，否则可能遭遇在野利用。

Recently fixed Plex Media Server vulnerabilities are being actively exploited in the wild, with a published proof-of-concept exploit chain that its researcher developed using AI tools. Users are urged to update to version 1.43.3 immediately and harden their server configurations.

This article discusses the OpenBSD errata process, detailing how vulnerabilities are reported and patched in the OpenBSD operating system.

Google's Chrome browser is increasing patching frequency to twice a week due to a surge in security bugs found by AI vulnerability hunting. The Chrome security team reports fixing 1,072 bugs in June alone, driven by internal AI tools.

A filtering engine and database that scans public kernel commits to identify security patches that have not yet been propagated to stable branches, helping developers track potential vulnerabilities.

cPanel released emergency patches for three high-severity vulnerabilities following a ransomware attack on 44,000 servers, marking a second critical security update in just ten days.

Block shared how it uses OpenAI’s AI capabilities to discover and fix software security risks—the tool goes beyond statically scanning code to reason about attack patterns, cross trust boundaries, and chain together multistep attacks, revealing complete, end-to-end compromise paths while helping pinpoint issues, identify owners, suggest patches, and verify that fixes are effective.