Vulnerabilities // Cody Kretsinger

October 20, 2026 13 min read

PHP Ships Two Critical Fixes Tomorrow. Here's the Night Before.

PHP has released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical remote code execution vulnerabilities. What the advisories confirm, where distribution packages stand, and how to patch, verify and review.

How Cl0p Breached Shell, GE, and Philips Through One Flaw

Cl0p took engineering data from more than forty companies this summer without encrypting a single file. Cody Kretsinger on how mass extortion became an assembly line and what it means for the systems nobody watches.

Vulnerabilities Are Now the #1 Way In. The Window to Fix Them Is Closing.

For the first time in 19 years, vulnerability exploitation has overtaken stolen credentials as the top breach vector. Here's what the Verizon DBIR is really saying and what to do about it.