# Web & cybersecurity

> Corrective, web architecture and practical practices to maintain robust, fast and secure applications.

News

## Web & cybersecurity

Corrective, web architecture and practical practices to maintain robust, fast and secure applications.

- [PHP2Shell: Two Critical PHP Vulnerabilities, Risks and Fixes](https://sdx-development.com/en/news/web-cybersecurity/two-critical-php-vulnerabilities-risks-and-fixes) — PHP2Shell: Learn about vulnerabilities CVE-2026-109618 and CVE-2026-109619, vulnerable PHP versions, and urgent measures to secure your websites and applications.
- [Plugin4Shell: The Trap in AI Agent Plugins](https://sdx-development.com/en/news/web-cybersecurity/plugin4shell-the-trap-in-ai-agent-plugins) — Plugin4Shell reveals a plugin verification flaw affecting AI agents. Discover how it works, the fixes, and the precautions to take.
- [TanStack npm Attack: 42 Packages Compromised, CrowdSec Affected](https://sdx-development.com/en/news/web-cybersecurity/tanstack-npm-attack-42-packages-compromised-crowdsec-affected) — An attack targeting 42 TanStack packages on npm reportedly contributed to the cloning of approximately 170 private CrowdSec repositories.
- [Cloudflare revises AI bot controls](https://sdx-development.com/en/news/web-cybersecurity/cloudflare-revises-ai-bot-controls) — Cloudflare is changing AI bot controls on September 15, 2026. New settings, multi-purpose crawlers, and SEO risks to review.
- [Chrome: CVE-2026-85046 vulnerability is already being exploited](https://sdx-development.com/en/news/web-cybersecurity/chrome-zero-day-vulnerability-v8-cve-2026-85046) — Google fixes CVE-2026-85046, a Chrome zero-day vulnerability already being exploited. Affected versions, risks, and the procedure for updating the browser.
- [WordPress: critical vulnerabilities affect popular plugins and themes](https://sdx-development.com/en/news/web-cybersecurity/wordpress-critical-plugin-theme-vulnerabilities-august-2026) — WPMU DEV, Avada, TranslatePress, Pods and GiveWP are affected by critical vulnerabilities. Affected versions, patches and good WordPress practices.
- [Next.js: a critical patch arrives on August 26, 2026](https://sdx-development.com/en/news/web-cybersecurity/nextjs-critical-security-fix-august-2026) — Next.js prepares a security update for branches 16.3 and 15.5. In particular, a critical vulnerability must be corrected: projects in production must be updated quickly.

---

[View the HTML page](https://sdx-development.com/en/news/web-cybersecurity)