Hardline Alertshttps://hardline-43l.pages.dev/alerts/ Only when it matters: what is happening, and what to do.en-au Two critical flaws in PHP leaked before their fixhttps://hardline-43l.pages.dev/journal/php2shell/hardline-alert-php2shellWed, 21 Oct 2026 09:00:00 +1100PHP, the language behind about 7 in 10 websites, confirmed two critical flaws after details leaked. The fix is due at 1 am Thursday, Sydney time. No attacks reported yet. What to do: Ask anyone who runs a website for you whether they use PHP, and when they'll install the fix. Ignore emails urging you to log in for a security update. A leading open AI model, with its safety rules removed, is free to downloadhttps://hardline-43l.pages.dev/journal/guardrails-off-in-35-hours/hardline-alert-deepseek-abliteratedMon, 19 Oct 2026 09:00:00 +110035 hours after DeepSeek released V4.1 Flash, a patch removing its refusals, including around cyber attacks, appeared on Hugging Face. What to do: Nothing to do today. Expect scam emails, texts and calls to keep getting more convincing.