❌

Reading view

PHP2Shell

Malwarebytes:

If you’ve encountered websites in maintenance mode today, it may be a security precaution. Reports of attacks targeting two critical PHP vulnerabilities have prompted warnings to install emergency updates and consider temporarily taking affected services offline until they can be patched.

[…]

Successful exploitation could let an attacker run malicious code on an affected server without logging in. That code would run with the permissions available to the PHP process, potentially allowing attackers to steal application data, alter website content, or establish a backdoor.

[…]

The PHP team scheduled its emergency security updates for October 21 at 10:00 am ET (14:00 UTC). It has now released fixes in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, and urges users to update immediately. Administrators should check with their hosting provider or operating system vendor for the appropriate updated packages.

Adam Engst:

Expect to see numerous websites go down or serve “Page not found” errors as they update PHP, the programming language that underpins 70% of websites. If you run a WordPress, Drupal, or Joomla site, this affects you directly.

Nick Heer:

Word on the street is that these exploits have leaked, and that remote code can likely be executed all the way back to PHP 5. If you have access to your website’s php.ini file, it might be worth turning off multipart uploads for now.

Vincent Schmalbach:

Two changes reduce the risk until the fixed versions are out. They were checked against PHP’s source code and the PHP manual, but they are not an official PHP mitigation. When someone suggested that turning off session upload progress might be enough, PHP core developer Gina Peter Banyard replied, “The only thing I can say is that the only mitigation is patching / upgrading PHP. I sadly know too much.” Use the stopgaps to lower the risk for a few hours, and update PHP as soon as the fixed builds exist.

Add to php.ini:

session.upload_progress.enabled = Off

Add to .htaccess:

<If "req('Content-Type') =~ /multipart/i">
    Require all denied
</If>
  •  

Government Websites Go Dark After Severe PHP Vulnerabilities Disclosed

"PHP disclosed two critical vulnerabilities in their programming language and urged web site operators to immediately apply the fix," writes longtime Slashdot reader smooth wombat. "As a result, government web sites in Europe and elsewhere temporarily went dark on Wednesday as operators worked to protect their systems." The Independent reports: Dane Knecht, the chief technology officer of Web and cloud security firm Cloudflare, said that attacks were emerging and Cloudflare was updating its firewall rules as a stopgap measure. "We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as PHP releases the update," he said on X. Officials have said that all PHP versions from PHP 5 onward could be affected, although PHP has not yet disclosed which versions are vulnerable. Special thanks to Slashdot readers Alain Williams and mrspoonsi for sharing this critical PHP security release. For more details, read the official PHP announcement and guidance on what to do next.

Read more of this story at Slashdot.

  •  

PHP: Vulnerabilidades críticas colocam sites e servidores em risco. O que está em causa e quem pode ser afetado?

A linguagem de programação PHP é amplamente utilizada na Internet e está por trás de uma variedade de websites e serviços. Agora, a descoberta de duas vulnerabilidades críticas está agora a levantar sérias preocupações de segurança, podendo colocar sites e aplicações online em risco. As correções já estão disponíveis.

The post PHP: Vulnerabilidades críticas colocam sites e servidores em risco. O que está em causa e quem pode ser afetado? appeared first on Tek Notícias.

  •  

PHP warns it plans to release 2 emergency patches imminently

Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere.

PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.

Waiting for PHP2Shell

“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.”

Read full article

Comments

© Getty Images

  •  

PHP warns it plans to release 2 emergency patches imminently

Website admins, brace yourselves. Fixes for what are believed to be uncommonly severe vulnerabilities are scheduled to drop in a little more than 12 hours for PHP, a programming language that powers websites and Web applications everywhere.

PHP maintainers said Monday that they planned to release patches for two vulnerabilities, both with severity ratings of 9.2 out of a possible 10.

Waiting for PHP2Shell

“All PHP users are encouraged to prepare now so they can upgrade as soon as the release is available,” the advisory stated. “We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.”

Read full article

Comments

© Getty Images

  •  

Quels sont les 4 meilleurs nettoyeurs vapeur ?

Le nettoyeur vapeur a bien évolué et ne se contente plus de laver les sols. Plus maniables et polyvalents, les modèles récents peuvent s’attaquer aux joints, aux vitres, aux tapis ou à certaines surfaces textiles grâce à leurs nombreux accessoires. Temps de chauffe réduit, débit de vapeur...

  •  

Australia’s new environmental protection agency approves coal project, angering climate groups

Queensland open-cut Saraji mine will be able to keep digging until 2055 as Anthony Albanese denies tensions with Pacific leaders over fossil fuels

Australia’s new national agency for environmental protection has approved its first coal project, allowing a Queensland open-cut mine to keep digging until 2055 while clearing threatened woodland and koala habitat.

The confirmation of the extension of the Saraji mine, which digs and exports coal for steel making, comes after the prime minister, Anthony Albanese, denied this week there was tension over Australia’s fossil fuel exports during talks with Pacific leaders.

Continue reading...

© Photograph: Wikimedia/Lock the Gate Alliance

© Photograph: Wikimedia/Lock the Gate Alliance

© Photograph: Wikimedia/Lock the Gate Alliance

  •  

Fini la chasse aux cartouches : cette imprimante HP voit son prix fondre chez Cdiscount

La rentrée approche à grands pas et l’imprimante reprend du service. Avec ses réservoirs d’encre rechargeables, son Wi-Fi et ses fonctions d’impression, de copie et de numérisation, la HP Smart Tank 5105 a de quoi alléger la corvée des cours et documents à imprimer.

  •  

HP’s HyperX Omen 15 isn’t quite the budget-friendly gaming laptop its predecessor was

A HyperX Omen 15 gaming laptop on a wood table, in front of a splash of cyan colored light.
Tough sell. | Photo: Antonio G. Di Benedetto / The Verge

The HP HyperX Omen 15, which I first saw at CES, replaces the HP Victus 15, a longtime bestselling budget gaming laptop. The Victus cost just $800, or less when on sale, and was a good entry point to decent laptop gaming.

The Omen 15 has nice little upgrades over the Victus. Its RTX 5050 Laptop GPU can play 2026's latest games, albeit on low-ish settings. But it's also got a brighter 16:10 aspect ratio display with higher refresh rate, and a 1080p webcam to make it a little better for non-gaming stuff.

I'd call it a working-class gaming laptop, but thanks to RAMageddon, the Omen 15 starts at $1,200 - a far cry from the $800 that made its …

Read the full story at The Verge.

  •  
  •  

Minimo storico per il notebook HP 15 con Intel Core Ultra 5 per studio e lavoro

Un buon notebook per la routine di ogni giorno che non richiede un investimento esagerato potrebbe essere l'HP 15 (modello fd2000slx). Con processore Intel Core Ultra 5 225U (quindi del 2025), 512 GB di archiviazione e il solito display da 15,6 pollici con anti-riflesso è ora in promo su Amazon a 629,99€, con consegna gratuita per tutti i clienti Prime. Per questa configurazione, è il minimo storico.

Nota prezzo: l'offerta è stata verificata su Amazon alle 09:00 del 2 agosto. Il prezzo potrebbe subire variazioni nelle ore successive.

Il chip Intel Core Ultra 5 225U è un buon alleato per l'uso quotidiano. Aprire contemporaneamente fogli di calcolo su Excel, presentazioni su Canva e mantenere attiva una chiamata su Microsoft Teams è una operazione che dovrebbe scorrere via liscia, senza fastidiosi rallentamenti. La RAM si ferma a 8GB, forse il vero limite di questo modello, mentre l'unità SSD da 512GB offre spazio sufficiente per i file personali e, allo stesso tempo, garantisci un avvio rapido di Windows 11, preinstallato.


Il TOP più piccolo e completo del mercato? Samsung Galaxy S25, compralo al miglior prezzo da Nuovetecnologie.eu a 475 euro.

CLICCA QUI PER CONTINUARE A LEGGERE

  •  

MacBook Neo Defies the Global PC Slump

MacBook Neo helped Apple move against the global PC market in the second quarter of 2026, delivering double-digit Mac shipment growth while most leading computer manufacturers sold fewer units than a year earlier.

Preliminary data from IDC estimates that Apple shipped 6.7 million Macs during the quarter, up 10.1% from 6.1 million in Q2 2025. Its worldwide market share rose from 8.5% to 9.9%, placing the company within a fraction of the 10% threshold.

The rest of the industry moved in the opposite direction. Global shipments fell 4.9% year over year to 68.2 million units, ending nine consecutive quarters of growth. A separate Omdia estimate placed the decline at 3.6% and Apple growth at 15.9%, but both research groups identified the same pattern: the Mac gained ground while established Windows PC vendors contracted or remained flat.

IDC directly connected the Apple increase with the arrival of its lowest-priced notebook. MacBook Neo began shipping in March, giving the model its first complete quarter of retail availability between April and June.

MacBook Neo Drives Mac Shipment Growth

MacBook Neo entered the market as an alternative for buyers previously priced out of the Mac lineup.

The 13-inch notebook launched at $599 with an A18 Pro chip, 8GB of unified memory, a Liquid Retina display and up to 16 hours of video playback. It also brought macOS, Apple Intelligence and integration with the iPhone ecosystem into a price range commonly occupied by mainstream Windows laptops and Chromebooks.

That positioning attracted students, families and first-time Mac customers who did not need the performance or display technology of a MacBook Air or MacBook Pro. The four-color aluminum design also gave the entry model a more recognizable identity than the older Mac notebooks that frequently remained on sale through discounts.

IDC had already identified the computer as an unusual source of strength when it revised its notebook forecast earlier in 2026. Demand exceeded initial expectations in several markets, and reported inventory shortages appeared shortly after the March launch.

The effect became much more visible in Q2. MacBook Neo was available for the entire three-month period, allowing Apple to increase production, expand retail distribution and serve customers who could not obtain the computer during its first weeks.

The entry model also widened the Mac lineup without replacing the MacBook Air. Buyers seeking more memory, faster ports, longer wireless web use or additional external-display support could continue moving toward the M5-powered Air, while the less expensive machine handled education, office work, web browsing and communication.

That separation allowed Apple to reach lower price points without reducing the value of its premium notebooks.

A laptop screen displays multiple colorful open windows, including a chemistry diagram, a drawing of an artichoke with a chemical structure, a chat with an AI image generator, and a grapefruit photo, with various app icons along the bottom.
Image Credit: Apple Inc.

Lenovo, HP and Dell Lose Shipments

Apple remained the fourth-largest traditional PC vendor, but its performance contrasted sharply with the companies above it.

Lenovo retained first place with 16.6 million units and 24.4% market share. Its shipments declined 2.1% from the previous year.

HP experienced the steepest drop among the top five, falling 9% to 13 million units. Dell shipped 9.3 million computers, representing a 5% decline. Asus remained nearly flat at 5 million units, up only 0.2%.

Manufacturers outside the five largest brands collectively suffered a 10.5% contraction, indicating that weaker demand and component inflation placed even more pressure on smaller companies.

The figures measure shipments into distribution channels or directly to end users, not confirmed retail purchases by individual consumers. A manufacturer can therefore record shipment growth while some inventory remains unsold in stores or warehouses.

MacBook Neo demand appears to have been strong enough to support Apple production increases rather than simply filling channels. The company reportedly doubled its annual production target after the initial response, although later quarters will reveal how much of Q2 reflected lasting demand rather than launch-period enthusiasm.

Apple also benefits from operating at a scale that provides leverage with memory, storage and semiconductor suppliers. Smaller PC brands face greater difficulty securing components at competitive prices when shortages intensify.

Memory Costs Reverse the PC Recovery

The Q2 contraction arrived after manufacturers and commercial customers accelerated purchases during late 2025 and early 2026.

Buyers expected memory and storage prices to rise, encouraging some businesses to replace computers earlier than planned. Vendors also increased inventories while components remained available.

That activity supported nine quarters of market growth but borrowed demand from later periods. Once the early purchases were completed, the industry faced a more difficult combination of expensive components, cautious consumers and elevated retail prices.

The memory shortage is closely connected to the AI infrastructure boom. Chipmakers are dedicating more production capacity to high-bandwidth memory used by data center accelerators, limiting the supply of conventional DRAM needed for personal computers.

IDC expects little relief before the end of 2027 or early 2028. The research company forecasts an 11.3% decline in worldwide PC shipments across 2026, with the fourth quarter potentially falling 20% from the previous year.

Computer revenue may not decline at the same pace. Manufacturers have raised prices faster than shipments have fallen, allowing them to collect more money from fewer units.

That strategy creates another problem. Retailers and distributors can become trapped with expensive inventory if customers refuse the new prices, forcing promotions or production reductions later.

MacBook Neo initially softened that pressure by giving Apple a new product near the bottom of the notebook market. Its original $599 price made the Mac competitive with midrange Windows machines at the moment many rivals were becoming more expensive.

A close-up view of a computer RAM module, highlighting four black memory chips on a green circuit board with gold connector pins—an example of hardware impacted by the recent RAM price surge.
Image Credit: Freepik

The Price Increase Creates the Next Test

The strongest Q2 MacBook Neo shipments were recorded while most customers could still buy the computer at its introductory price.

Apple raised the U.S. starting price to $699 in late June as memory and storage costs affected the Mac and iPad lineups. The education price remained at $599, preserving the original offer for eligible students and educators.

A $100 increase changes the comparison with discounted Windows notebooks and places the entry model closer to older MacBook Air configurations available through third-party retailers.

Apple must now determine whether the appeal came primarily from the low launch price or from the combination of macOS, battery life, design and iPhone integration.

The company remains better positioned than many rivals to absorb supply disruption, negotiate long-term component agreements and promote several notebooks at different prices. MacBook Neo also uses an iPhone-class A18 Pro processor rather than an M-series chip, providing another way to manage silicon costs and production capacity.

IDC expects the full PC market to deteriorate during the second half of 2026. Apple will enter that period with almost 10% worldwide share, but the September quarter will be the first to measure MacBook Neo demand almost entirely at the higher $699 retail price.

The post MacBook Neo Defies the Global PC Slump appeared first on AppleMagazine.

  •  

HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs

The Indian government has fined HP India and its partners a total of 1.4 billion rupees (about $14.4 million) for working with reseller partners in the “cartelization” of computers, ink cartridges, and toner.

The Competition Commission of India (CCI) said this week that it found HP India had colluded with some channel partners to drive up the cost of bids for government contracts for computers, as well as for selling ink cartridges, toner, and other printing supplies, including graphic and digital manufacturing supplies.

It said that HP was aiming to outcompete other OEMs and discourage resellers from selling “counterfeit” ink and toner.

Read full article

Comments

© Getty

  •  

HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs

The Indian government has fined HP India and its partners a total of 1.4 billion rupees (about $14.4 million) for working with reseller partners in the “cartelization” of computers, ink cartridges, and toner.

The Competition Commission of India (CCI) said this week that it found HP India had colluded with some channel partners to drive up the cost of bids for government contracts for computers, as well as for selling ink cartridges, toner, and other printing supplies, including graphic and digital manufacturing supplies.

It said that HP was aiming to outcompete other OEMs and discourage resellers from selling “counterfeit” ink and toner.

Read full article

Comments

© Getty

  •  

HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs

The Indian government has fined HP India and its partners a total of 1.4 billion rupees (about $14.4 million) for working with reseller partners in the “cartelization” of computers, ink cartridges, and toner.

The Competition Commission of India (CCI) said this week that it found HP India had colluded with some channel partners to drive up the cost of bids for government contracts for computers, as well as for selling ink cartridges, toner, and other printing supplies, including graphic and digital manufacturing supplies.

It said that HP was aiming to outcompete other OEMs and discourage resellers from selling “counterfeit” ink and toner.

Read full article

Comments

© Getty

  •  

4 alternativas leves e compactas ao MacBook Neo sem “esticar” demasiado o orçamento

O MacBook Neo trouxe leveza e um preço competitivo ao ecossistema Apple, mas quem prefere Windows também tem hoje portáteis igualmente leves e capazes para o dia a dia, fáceis de encontrar em Portugal.

The post 4 alternativas leves e compactas ao MacBook Neo sem “esticar” demasiado o orçamento appeared first on Tek Notícias.

  •  

Ce nettoyeur haute pression Bosch en promo est prêt à déclarer la guerre aux traces tenaces

Si votre terrasse a perdu de son éclat après l'hiver, ce nettoyeur haute pression peut rapidement lui redonner meilleure allure. Actuellement proposé à prix réduit sur Cdiscount, il permet d'entretenir facilement les extérieurs sans multiplier les efforts. Une offre intéressante qui pourrait...

  •  

Da Asus à Lenovo: Estes são primeiros portáteis equipados com o “super processador” Nvidia RTX Spark

Depois daquela que foi considerada a mais relevante apresentação, até agora, na Computex 2026, está na altura de conhecer um pouco melhor o que é o Nvidia RTX Spark, e quais os primeiros equipamentos a virem equipados com o mesmo.

The post Da Asus à Lenovo: Estes são primeiros portáteis equipados com o “super processador” Nvidia RTX Spark appeared first on Tek Notícias.

  •  
❌