Daniel Fedick
FIELD CTO
blog.fedick.net
/
tags
/
secrets
RSS
secrets
1 ยท newest first
Date
Title
Tags
Read
2026-10-21
PHP2Shell, the FBI Warning, and the Password in Your Config File
Two critical PHP flaws can let one unauthenticated request run code on a web server. Patch first. Then look at what that server could read, how Vault dynamic database credentials limit the damage, how to vet software before it ships, and why long-lived secrets matter for harvest now, decrypt later.
secrets
vault
zero-trust
php
12 min