How does the Security Team at @thephpf.bsky.social handle vulnerabilities in the age of AI? @alexdaubois.bsky.social shares how the team manages the queue, notably using defensive and offensive AI with OpenAI's Daybreak Red and Claude Mythos: thephp.foundation/blog/2026/10...

Show Post

In our latest blog post, @alexdaubois.bsky.social shares how the PHP Security Team operates, how your security reports are triaged, and how you can do your part to help PHP be more secure. thephp.foundation/blog/2026/1... #php #security

Show Post

Sécurité de l'interpréteur PHP, rapports de faille, Ecosystem Security Team... Dans l'interview du jour, @alexdaubois.bsky.social parle de son rôle à la PHP Foundation et pourquoi l'humain reste indispensable face aux rapports de sécurité. Lisez-la, venez l'écouter au Forum PHP 2026. buff.ly/B4qXBU9

Show Post

🔒 Vulcain 1.4.2 is out, a security release. Fixes 3 vulnerabilities in Preload/Fields directive handling: • High: quadratic response rebuild (DoS) • Medium: unbounded JSON-pointer recursion • Low: HTTP/2 push-counter race Upgrade: github.com/dunglas/vulc...

Show Post

All three were reported by @alexdaubois.bsky.social. Full write-ups are in the GitHub Security Advisories on the repo. If you run Vulcain as a Caddy module or standalone, update now.

Show Post