Cybersecurity
Security guides for developers and small teams running their own servers and apps, covering disclosed vulnerabilities, security releases and package registry attacks. Learn who is affected, how to check your systems for exposure and what to patch.
All guides in this topic
npm Worm Still Spreading: Check Your Servers and CI
Check servers and CI for the ChainDrop npm worm, remove token-monitor persistence before revoking secrets, and rebuild with npm install scripts restricted.
Next.js Critical RCE Bugs: Patch Your Self-Hosted App Now
Check your self-hosted Next.js app for the October security vulnerabilities, upgrade affected dependencies, rebuild, and verify the running release.
Node.js October Security Release: What to Patch and How
Check which Node.js runtime your Ubuntu server actually uses, install the October security fix, restart affected services, and verify the running process.
PHP Critical RCE Fix: Find, Patch and Restart Every Server
Find exposed PHP runtimes, install the October security fixes on Ubuntu, restart web workers, and verify that every application uses a patched runtime.