Two separate security crises are now hitting the web’s core infrastructure. A certificate authority issued intermediate certificates whose private keys could be guessed by anyone, and details of two critical PHP vulnerabilities leaked before patches were ready. Browser makers fixed the certificate problem within hours. The rest of the internet, including Linux servers, Docker images, … Continue reading Critical PHP Flaws and Weak SSL Keys Put Millions of Websites at Risk