PHP2Shell and eMudhra Patched
Two security events landed side by side this week, PHP2Shell and the eMudhra certificate compromise. Both reached the same place,
PHP2Shell and Azure DevOps: what to check
On October 21, 2026, PHP disclosed two critical vulnerabilities that can allow remote code execution. Neither Azure DevOps Services, our
.NET October 2026 Out-of-Band Security Updates
Today, we are releasing out-of-band (OOB) security updates for .NET 8, .NET 9, and .NET 10, along with .NET 11
Manual Effort and Maintenance Debt: The Push Toward Autonomy in Software Testing
AI-assisted development is increasing the volume and pace of software change, but testing teams still devote substantial capacity to manual
Linux Foundation: AI Speeds Development, but Low-Quality Code Strains Maintainers
A new Linux Foundation study finds that generative AI is delivering big productivity gains for open source software developers, but
Hackers Inject Credential-Stealer, RAT Into LiteLLM
Attackers compromised a version of LiteLLM this week by injecting malicious code into all seven of its published Python wheels
The Automation Confidence Gap: When Should AI Be Allowed to Change Production?
AI-generated infrastructure recommendations can look convincing, but production execution requires more than a plausible runbook. A seven-factor confidence index helps
When 200 OK Isn’t OK: Observability for LLM Systems
Traditional monitoring can show an LLM-powered application as healthy even when it delivers incorrect answers. Drawing on experience at Varo
Security Update on PHP2Shell: Impact for Docker Customers
Summary On Tuesday, October 20, 2026, Docker began tracking two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, commonly known as
ActiveState Partners with Docker to Secure the Open Source in Enterprise Containers
Even security teams that have invested in a hardened base image often can’t say what’s running on top of it.