BlockSpam · Relcom

Publications

Investigation practice, security news and platform knowledge.

Blog

PHP2Shell: AI found a PHP vulnerability that sat unnoticed for more than ten years. What site owners should do

On 21 October 2026, PHP released emergency updates 8.5.12, 8.4.27, 8.3.36 and 8.2.35. They fix two critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated code execution on a server. Researchers from Wiz, Calif and OpenAI found the flaws with the help of AI. Details leaked before the release, and exploitation attempts are already under way. Site owners need to update PHP itself, not WordPress or plugins.

BlockSpamOct 22, 2026, 3:40 PM

Blog

Post-quantum authentication: why certificate infrastructure is worth testing now

Microsoft has launched a PQC TLS pilot with ML-DSA-87 roots for testing in closed environments. We look at what is confirmed, how authentication challenges differ from encryption challenges, the pilot's limitations and where to start preparing.

BlockSpamOct 9, 2026, 8:27 AM

Blog

A name only its owner can vouch for

What the hijacking of three national domain registries reveals, and how blockchain-held names with owner-published keys close the gap

lopux.net · Reliable Communications s.r.o.Oct 8, 2026, 10:22 AM

Blog

Proofs without disclosing data: what Longfellow's move to Linux Foundation Europe means

An analysis of Google's announcement that it is donating its open-source zero-knowledge proof library Longfellow to the Post-Quantum Cryptography Alliance under Linux Foundation Europe. It separates confirmed facts from company claims and covers the mechanism, limitations and practical steps.

BlockSpamOct 7, 2026, 10:54 PM