#laravel

ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

Oct 22, 2026 // 23:34

This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, […]

Laravel Lang packages hijacked to deploy credential-stealing malware

May 23, 2026 // 23:57

A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags […]

CISA: Apple, Craft CMS, Laravel Flaws in KEV. Patch by 4/3/26 Mandated.

Mar 21, 2026 // 11:34

On Friday, the U.S. agency responsible for cybersecurity, CISA, added five security weaknesses in products from Apple, Craft CMS, and Laravel Livewire to its list […]

Warning: Malicious Laravel Packages on Packagist Targeting All Major OSs

Mar 4, 2026 // 14:16

Security researchers at Socket discovered several malicious Packagist packages masquerading as Laravel utilities. These packages deploy a cross-platform Remote Access Trojan (RAT) targeting Windows, macOS, and Linux systems. Malicious Packages Identified The threat […]