Alerts

Only when it matters. A short, plain-English warning when something serious is happening, and what to do about it. By email, or here.

  1. Critical
    Two critical flaws in PHP leaked before their fix

    PHP, the language behind about 7 in 10 websites, confirmed two critical flaws after details leaked. The fix is due at 1 am Thursday, Sydney time. No attacks reported yet.

    What to doAsk anyone who runs a website for you whether they use PHP, and when they'll install the fix. Ignore emails urging you to log in for a security update.

    Read the full story
  2. Watch
    A leading open AI model, with its safety rules removed, is free to download

    35 hours after DeepSeek released V4.1 Flash, a patch removing its refusals, including around cyber attacks, appeared on Hugging Face.

    What to doNothing to do today. Expect scam emails, texts and calls to keep getting more convincing.

    Read the full story