The cybercriminal group Qilin, operating under a ransomware-as-a-service model, has just published a new wave of victims on its leak site. Among them are the Spanish tax agency (Agencia Tributaria), the French municipalities of Saint-Claude and Elne, as well as...
Ah, Magento! For most of you reading this, it’s probably a love-hate relationship with our favorite stack. A bit like Rachel and Ross: we get mad at it often, but we’ll still defend it to the bitter end. Today, I want to take a moment to look back at the story of this...
A critical vulnerability has been found in Redis (CVE‑2025‑49844), the widely-used key-value store in web infrastructures. Dubbed RediShell, the flaw allows attackers to execute remote code by injecting malicious Lua scripts. The root cause lies in a use-after-free...
A quiet release that actually matters The release of PHP 8.5 is approaching, and while it may not make as much noise as a major version upgrade, it’s exactly the kind of update that changes your day-to-day work. No flashy syntax changes, no new way to write a...
Docker is the “pain au chocolat” of the tech world: everyone loves it, everyone talks about it, but the moment you bring up security, suddenly the break room gets suspiciously quiet.Keep saying “it’s isolated, it’s flexible, it’s portable,” and soon you start...