https://barsec.tech/cyber-intel Plain-English briefs on important cybersecurity developments for small business owners. en-us Fri, 30 Oct 2026 16:50:00 GMT https://barsec.tech/cyber-intel/php2shell-critical-php-flaws-active-exploitation https://barsec.tech/cyber-intel/php2shell-critical-php-flaws-active-exploitation Fri, 30 Oct 2026 16:50:00 GMT If your website or server uses PHP, two flaws can let an attacker run commands without logging in. Patched versions are available now. Actively Exploited Vulnerability https://barsec.tech/cyber-intel/gitlab-cve-2026-97229-self-hosted-server-takeover https://barsec.tech/cyber-intel/gitlab-cve-2026-97229-self-hosted-server-takeover Fri, 30 Oct 2026 16:50:00 GMT A flaw in GitLab can let an attacker run code on a self-hosted server without logging in. GitLab.com and GitLab Dedicated are already patched. Actively Exploited Vulnerability https://barsec.tech/cyber-intel/wordpress-7-1-4-security-update-active-exploit-attempts https://barsec.tech/cyber-intel/wordpress-7-1-4-security-update-active-exploit-attempts Fri, 30 Oct 2026 16:50:00 GMT The security release fixes 22 issues. The most serious can let an attacker run code during a brief window while WordPress Core is updating. WordPress & Plugins