Articles tagged: Cybersecurity

Two critical flaws in the core PHP runtime (CVSS 9.2) allow unauthenticated remote code execution. Here's what's affected, a checklist for auditing your PHP projects, and four practices that turn the next critical PHP fix into a one-line change.

Cloudflare's "Add security headers" managed transform is often too rigid, causing it to block YouTube embeds by default. By replacing this "one-click" toggle with a custom Cloudflare Snippet, you can surgically add YouTube's domains to the allowed list, while maintaining a high security posture.