PHP security update: what to ask your hosting provider
The patch may be installed while the website is still served by an old process. Here is what your hosting provider needs to verify.
Highphp
Read article OEJ · security made understandable
Search articlesSecurity news for website owners
What changed, who is affected, and what you can do to protect your website.
More to read
Sources and practical steps
libtailscale could identify the wrong connection
The flaw affected applications embedding libtailscale, not standard Tailscale clients. Check the library and any decisions based on peer addresses.
Hightailscale
Read article 
Node.js security update: Brotli is not the only reason
The 21 October Node.js releases fix Brotli, DNS, TLS and other issues. Check the runtime actually serving your application, not just dependencies.
Highnodejs
Read article 
Tailscale’s certificate update: what does it fix?
Tailscale 1.104.2 distrusts compromised eMudhra certificates. This certificate update is not a fix for the later Tailworm research findings.
Hightailscale
Read article 
Tailworm: what the Tailscale research does and does not show
A researcher reports lab findings in Tailscale and headscale. Separate the tested conditions, the vendor response and the questions still open.
Hightailscale
Read article 
Does your website’s PHP version still receive security updates?
A working website does not tell you whether its software is still supported. Here is one question for your hosting provider.
For informationphp
Read article