PHP Critical RCE Fix: Update to 8.5.12, 8.4.27, 8.3.36
On 21 October 2026 the PHP project released security updates for every supported branch, and the...
Oct 22, 20266 min read0 reactions0 comments
Back to articles Oct 22, 2026 
Oct 18, 2026
Oct 16, 2026
Oct 8, 2026
Tag archive
#apache
H
Oct 20, 2026How to Stop Rotating-IP Cloud Scrapers (AS132203 & AS45102) on Nginx & Apache 2.4 in <0.08ms — Without Blocking Googlebot
How to block rotating-IP headless Chromium scrapers (AS132203 Tencent Cloud & AS45102 Alibaba Cloud) on Nginx, Apache 2.4 & .htaccess in <0.08ms without harming Googlebot.
Oct 20, 20264 min read0 reactions0 comments
A
Oct 20, 2026Apache mod_vhost_alias Overflow CVE-2026-63292: Exposure, Exploit Conditions and Patching Priorities
Apache mod_vhost_alias Overflow CVE-2026-63292: Exposure, Exploit Conditions and Patching...
Oct 20, 20262 min read0 reactions0 comments
The Outage That Wasn't a DDoS
Site and webmail died, WHM stayed up, everyone said DDoS. It was one scraper, a URL that never ends and pm.max_children = 5. How I proved it, and the fix.
Oct 18, 202610 min read0 reactions0 comments
S
Oct 18, 2026Severity context: why CVE-2026-42528 sits below the 2.4.69 headline flaws
Technical analysis of CVE-2026-42528 in Apache HTTP Server mod_dav.
Oct 18, 20262 min read0 reactions0 comments
Native Tables, Managed Iceberg, or Iceberg in an Open Catalog
On Google Cloud, a lakehouse table can live in BigQuery's own storage, or as Iceberg files in your...
Oct 16, 202651 min read0 reactions0 comments
A
Oct 13, 2026Apache Kafka
Apache Kafka is a powerful open-source distributed event streaming platform designed to handle...
Oct 13, 20262 min read0 reactions0 comments
T
Oct 13, 2026The dependency problem behind CVE-2026-103877: patching a library that hides inside other software
Technical analysis of CVE-2026-103877, a CWE-502 deserialization flaw in the Apache Directory LDAP API fixed in 2.1.9 and 1.2.9.
Oct 13, 20263 min read0 reactions0 comments
C
Oct 12, 2026CVE-2026-63292 vs. Normal Apache Traffic: Recognizing the Host Header Pattern That Triggers the mod_vhost_alias Overflow
CVE-2026-63292 vs. Normal Apache Traffic: Recognizing the Host Header Pattern That Triggers...
Oct 12, 20262 min read0 reactions0 comments
H
Oct 10, 2026How many worker processes can a single WebDAV lock loop take down
Technical analysis of CVE-2026-42528 in Apache HTTP Server mod_dav.
Oct 10, 20262 min read0 reactions0 comments
A
Oct 10, 2026Apache httpd 2.4.68 to 2.4.69: Upgrade Notes for the CVE-2026-63292 Fix and Companion Advisories
Apache httpd 2.4.68 to 2.4.69: Upgrade Notes for the CVE-2026-63292 Fix and Companion...
Oct 10, 20262 min read0 reactions0 comments
The Apache SSL line that looks right and still won't start
I built a free config generator for Nginx and Apache. Before shipping the SSL part, I ran every...
Oct 8, 20264 min read0 reactions0 comments