Skip to content

IT Security Blog: Vulnerabilities, Attacks, and Defense

In the IT security blog of Rootsektor IT-Security GmbH, we put current vulnerabilities and advisories into context, explain attack techniques, and show which measures help organizations protect their systems – factual, with sources, and with steps you can put into practice.

All articles

Latest article

Vulnerabilities & Advisories

php2shell: Critical PHP Vulnerabilities and What to Do Now

· Approx. 12 min read

Two critical flaws in the PHP core let attackers run code on web servers without authentication. Which versions are affected, how the vulnerabilities work, and what you need to do now.

Topics on the blog

Linked topics lead to all articles with this tag.

  • CVE
  • Patch management
  • PHP
  • Remote code execution

About the blog

What to expect from our IT security blog

The articles are written for IT managers, administrators, and executives who need to assess and prioritize security risks. Each article starts with the key message, followed by background, affected systems, and concrete steps for your team.

For current vulnerabilities, we rely on advisories from vendors and projects, on CVE records, and on warnings from security authorities and CERTs. We name our sources and the date of the information, and we update an article when the situation changes. Our IT security glossary explains the technical terms.

Categories group articles on one topic, such as vulnerabilities and advisories. Tags lead to articles that cover the same keyword.

How vulnerable are your systems?

A penetration test shows which vulnerabilities in your environment can actually be exploited. Describe your scope – after a short scoping call, you will receive a fixed-price quote.