Аккаунт в General iT
Войдите или создайте аккаунт для управления услугами в личном кабинете.
Страны не найдены. Попробуйте другое название или код.
Protecting websites, data and infrastructure.
On October 28, WordPress released 7.1.4 with security fixes. We examine the affected branches, the safe update sequence, and acceptance criteria for sites, stores, and integrations.
A Brotli decompression error can cause application crashes, disclosure of data from memory, or code execution. We list the fixed Node.js versions and the procedure for checking servers, containers, and integrations. Separate section: important update for Windows PHP builds.
On October 24, Oracle issued a critical warning, CVE-2026-114820. The new Java patch removes root certificates: who should verify their runtime environment, TLS trust, and API connections.
On October 23, Ruby versions 4.0.9, 3.4.12, and 3.3.13 were released. We explain which applications are affected, why the GitLab package requires separate verification, and what to ask the server administrator.
Fixes for two critical PHP vulnerabilities were released on 21 October, and on 23 October the developers clarified an additional rare risk. We explain the fixed versions and what to ask the administrator of a 1C-Bitrix website or another PHP-based system.
Using the same password for email, social networks, and work services can jeopardize multiple accounts at once.
A closed file list does not mean a closed archive. We examine access boundaries for backups, role verification, and temporary link conditions.
Several recent Marketplace updates have strengthened access rights, data escaping, and log protection. We examine how to assess these changes and safely update a live site.
A new API key setting hides sensitive fields in responses. I explain how to reduce passwords leaking into logs without breaking automation.
New Workers roles allow restricting access to specific applications. I explain with clear examples why viewing, publishing, and deletion rights must be separated.
Cloudflare described attacks that are invisible to the naked eye on a store. I explain why you must audit third-party scripts even if the server and payment system function normally.
The BitrixFramework documentation describes the Uploader subsystem. I examine what limits an online store needs to ensure convenient file uploads do not create access or storage issues.
Automated CASB rules can revoke risky file sharing. I examine the conditions that must be agreed upon before trusting the system with such actions.
Page 1 of 2
