PHP2Shell – A Pair of Critical PHP Vulnerabilities
A few days ago, a major announcement was made. PHP, the software that powers many websites on the Internet, had two major vulnerabilities. Many IT people (including myself) had to get busy and update our PHP instances.
The PHP vulnerabilities are designated as: CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 Critical).
The vulnerabilities allow attackers to exploit flaws in PHP’s memory handling by sending specially crafted web requests that cause out-of-memory conditions or fatal errors on the victim’s server. This can leave internal data uninitialized, or cause PHP workers to retain pointers to memory that have already been freed.
When PHP later accesses this invalid memory, attackers may manipulate its contents to redirect program execution, potentially achieving unauthenticated RCE with the privileges of the affected web-server process.
PHP has released fixes in versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Updating is highly recommended.
These vulnerabilities are excellent examples of an open source project not being inherently secure, just because it is open source. For the record, I do not assume closed-source is inherently secure either.
Visit the links below to get more information:
- https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching
- https://en.wikipedia.org/wiki/PHP2Shell
- https://www.crowdstrike.com/en-us/blog/obstacles-to-weaponizing-php2shell-likely-constrain-exploitation/
Posted in Cloud, Computers, General, Internet and Servers, Operating Systems, Programming, Security, Software
How to Check GPU Usage and Information in Windows 11
In this tutorial, I will show you how to view the basic statistics for your GPU.
1. Open Task Manager
Open Task Manager by pressing Ctrl + Shift + Esc on your keyboard, or by right-clicking the Start button
and selecting Task Manager.
2. Performance Tab
In the left-hand menu (for the Task Manager), click the “Performance” tab.![]()
3. Select your GPU
From the list, click your listed GPU. If you have more than one GPU (e.g., a laptop with dual graphics), you will see multiple GPUs listed.
4. Check your Specs
You will now see various, real-time graphs. At the bottom, you will notice “Dedicated GPU memory“. This shows you how much video memory you are currently using (left side) and how much total, dedicated video memory you have available (right side).
The Task Manager only shows a few statistics for your GPU. For more detailed information, you can use the GPU-Z or HWiNFO software.
That is the end of this tutorial. I hope this has been helpful to someone.
Posted in Computers, Operating Systems, Software, Tips & Tutorials
Reports Claim Hackers Stole Thousands of GitHub Private Repositories
Some of my readers, especially longtime ones, may remember that I have warned multiple times about being careful which extensions you choose to install in your web browser. Installing the wrong one, especially one that contains malicious code, can compromise your computer’s security.
This time, it is a lesson on being careful which extension you install in Visual Studio Code (a.k.a. VS Code). In a nutshell, an employee at GitHub installed (or at least updated) an extension that had been contaminated with malware code. The extension then proceeded to steal the employee’s credentials and gain access to tons of GitHub’s own private repositories.
The report claimed the malware stole:
- AWS keys
- Database passwords
- Kubernetes tokens
- SSH credentials
I would venture a guess that other IP (intellectual property) was stolen too.
I will let you read the full report from X below.
🚨A HACKER GROUP JUST STOLE 4,000 OF GITHUB'S OWN PRIVATE REPOSITORIES.. PUT THEM UP FOR SALE FOR $50,000.. AND THE WAY THEY GOT IN IS THE SCARIEST PART..
— Evan Luthra (@EvanLuthra) May 20, 2026
They didn't hack GitHub's servers.. They poisoned a VS Code extension.. One GitHub employee installed it.. And the attackers… https://t.co/EeTA6VBErl pic.twitter.com/cVOMuc83Rd
Posted in Cloud, Computers, General, Internet and Servers, Operating Systems, Security, Software
How to Enable or Disable Snap Windows in Windows 11
In this short tutorial, I will show you how to enable and disable the Snap Windows feature in Windows 11.
Snap Windows are useful when you want to quickly arrange multiple windows on your desktop. However, they can become irritating and even a hindrance to some people, if you want to position a window on the edge of the screen without triggering auto-snap.
With that little introduction out of the way, let us begin.
2. On the left-side panel, click on “System”, then click on the “Multitasking” option.
3. Now locate the “Snap windows” option, and click the toggle button to disable it. Of course, if sometime later on you wish to re-enable this feature, just click on the toggle button again to re-enable it.
That is the end of this tutorial. I hope someone finds it useful.
Posted in Computers, Operating Systems, Tips & Tutorials
