Updates.
Product news, shipping notes, and company updates from Peham.
Fresh from Peham
Now It's Java and Python: What's Still Unpatched After PHP2Shell (Including PHP and NGINX)
Java has an emergency 9.1 fix that the October 20 update didn't include, Python users need a new pip and certifi, PHP has a new advisory with no patch yet, and NGINX fixes still haven't reached Ubuntu or Debian 12. Here's what's still open and how to close it.
Read update
Not Just PHP and Node.js: NGINX, GitLab, Go and a Hacked Certificate Authority Also Need Patching This Week
PHP2Shell and the Node.js Brotli bug weren't the only security fixes this week. NGINX patched 5 flaws, GitLab fixed a CVSS 10 bug dating back to 2014, Go shipped a fix, and eMudhra's certificate keys were broken. We fact-checked the viral list and explain what to update, in plain language.
Read update
The Brotli Bomb: What the October 2026 Node.js Vulnerability Means for Your Next.js Stack
Following our recent coverage of the PHP2Shell Critical Vulnerability and the accompanying guide on How to Fix PHP2Shell, the IT industry is grappling with another major security wave. This time, the threat hits modern tech stacks running Node.js and Next.js.
Read update
How to Fix PHP2Shell: Step-by-Step Patch Guide for Every Server (CVE-2026-109618 & CVE-2026-109619)
Exact commands to patch PHP2Shell on Ubuntu, Debian, RHEL, Docker, Kubernetes, Coolify, cPanel, Plesk, Laravel Forge and shared hosting, plus how to verify the fix, stopgaps if you can't patch yet, and how to check whether you've been hacked.
Read update
PHP2Shell: One Request Could Hand Over Your Server. The 10-Year-Old PHP Bug Threatening 70% of the Web
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a pair of critical flaws in the PHP engine that let attackers take over WordPress, Laravel, Drupal and almost any PHP server with a single request. Here's what happened, who is affected, and what the industry is doing about it.
Read update
Pakistan's Record September 2026: Why It's the Smart Place to Hire an AI and Software Development Team
Pakistan's freelancers earned a record $197 million in September 2026 and IT exports reached $435 million. Here is what the numbers mean for companies hiring AI and software teams.
Read update