Remote profile

Update your PHP (if you can), folks. That is, install PHP 8.5.12 to fix critical vulnerabilities CVE-2026-109618 and CVE-2026-109619.
https://www.php.net/archive/2026.php#2026-10-21-5

Until updates are available on your platform, I hear that setting in php.ini

session.upload_progress.enabled = Off
session.use_only_cookies = On 

can mitigate some attacks.

@GossiTheDog
Looks like Calif may have a PoC called php2shell that works against WordPress.

A company trusted with ensuring that the communications on the internet are secure, eMudhra, was tasked with using unguessable 384-bit private keys for a NIST P-384 elliptic curve.

eMudhra:
How about 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004? That's 384 bits, right?

On the upside, I guess this means that we'll be able to MITM devices that we wouldn't otherwise be able to see the traffic from. (Think non-computers like TVs and the like that'll never see updates)

A company trusted with ensuring that the communications on the internet are secure, eMudhra, was tasked with using unguessable 384-bit private keys for a NIST P-384 elliptic curve.

eMudhra:
How about 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004? That's 384 bits, right?

On the upside, I guess this means that we'll be able to MITM devices that we wouldn't otherwise be able to see the traffic from. (Think non-computers like TVs and the like that'll never see updates)

Today's WTF:

Creating a document in Microsoft Word, my page content layout just happened to result in an additional blank page at the end that could not be deleted.

The fix:

1. Toggle the Show/Hide ¶ button in Word.
2. Change the FONT SIZE of the normally invisible ¶ character to be smaller.

With the invisible marker using a smaller size, an additional blank page at the end isn't required to store it. 🤦‍♂️

That sound you hear is trust for some eMudhra emSign certs being revoked. (Private keys compromised)

https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/