Security posts
7 posts in the Security category.
Quad9 Is Leaving France on November 24: How to Switch DNS in Time
The non-profit DNS resolver at 9.9.9.9 will withdraw from France rather than block domains for French users. Here is who is affected and how to switch resolvers on routers, PCs and phones.
LiteLLM 1.107.0 Was Compromised: How to Check and What to Rotate
Attackers pushed a credential-stealing LiteLLM 1.107.0 to PyPI and Docker on October 21, 2026. Here is how to check your machines safely, clean up, pin 1.106.2 and rotate secrets.
PHP Critical Security Update: Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35
Two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619) allow unauthenticated code execution. Fixed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35; here is how to check and update.
eMudhra CA Key Compromise: 8 Intermediate Keys Exposed, What to Check
Eight eMudhra intermediate CA keys were generated with too little randomness. Browsers blocked them within hours; sites on emSign ECC Root CA – G3 must replace certificates by October 27.
What Is Mark of the Web? The October 2026 Windows Zero-Day Explained
Mark of the Web is the hidden tag that makes Windows warn you about downloaded files. What the exploited October 2026 bypass changes, and how to check you are patched.
How PGP Encryption Works: Keys, Trust, and Real-World Use
PGP (and OpenPGP) has secured email and files since 1991. We explain key pairs, the web of trust, signing vs encrypting, and where PGP still makes sense in 2026.
How Bcrypt Hashes Passwords (And Why Cost Factor Matters)
Bcrypt is the password-hashing standard most modern apps still rely on. Here's how the Blowfish-based KDF works, why the cost factor matters, and how to pick a value that ages well as hardware speeds up.