Skip to content

Blog category

Vulnerabilities & Advisories

In this category, we put newly disclosed vulnerabilities and security advisories into context: what is affected, how serious the situation is, and which steps make sense now.

Vulnerabilities & Advisories

Putting current vulnerabilities into context

When vendors, open source projects, or CERTs warn of a critical flaw, the first question is whether your own environment is affected. The articles in this category summarize the known facts: the related CVE records, the CVSS rating, affected versions and components, and the status of updates and interim measures.

The focus is on steps you can take in day-to-day operations: finding affected systems, prioritizing and installing updates, and checking for traces of a possible attack. Where information is still changing, we state the date and the sources.

How we systematically identify and assess vulnerabilities in your environment is described on our vulnerability assessment page.

Articles in the category Vulnerabilities & Advisories

  • Vulnerabilities & Advisories

    php2shell: Critical PHP Vulnerabilities and What to Do Now

    · Approx. 12 min read

    Two critical flaws in the PHP core let attackers run code on web servers without authentication. Which versions are affected, how the vulnerabilities work, and what you need to do now.