Placeholder workshop agenda.
Related Workshops you may be interested in
All workshopsNow It's Java and Python: What's Still Unpatched After PHP2Shell (Including PHP and NGINX)
Java has an emergency 9.1 fix that the October 20 update didn't include, Python users need a new pip and certifi, PHP has a new advisory with no patch yet, and NGINX fixes still haven't reached Ubuntu or Debian 12. Here's what's still open and how to close it.
Read update
Not Just PHP and Node.js: NGINX, GitLab, Go and a Hacked Certificate Authority Also Need Patching This Week
PHP2Shell and the Node.js Brotli bug weren't the only security fixes this week. NGINX patched 5 flaws, GitLab fixed a CVSS 10 bug dating back to 2014, Go shipped a fix, and eMudhra's certificate keys were broken. We fact-checked the viral list and explain what to update, in plain language.
Read updateThe Brotli Bomb: What the October 2026 Node.js Vulnerability Means for Your Next.js Stack
Following our recent coverage of the PHP2Shell Critical Vulnerability and the accompanying guide on How to Fix PHP2Shell, the IT industry is grappling with another major security wave. This time, the threat hits modern tech stacks running Node.js and Next.js.
Read update