Latest insights and news from the IT world
From 9 December 2026, software explicitly counts as a product under German law. Providers of software, apps and portals are liable for defects and, in some cases, for missing security updates. Here is what to do now.
Read more: Software Is Now a Product: What Germany's New Product Liability Law Means from 9 December
The critical Brotli flaw CVE-2026-111497 affects not only Node.js but also .NET and many Python applications. Microsoft has shipped emergency updates – here is how to check and protect your systems.
Read more: Brotli flaw spreads: .NET and Python are now affected too
Cloudflare can fetch selected parts of large files from an origin server. A focused trial can show whether this helps your customer portal without compromising access controls.
Read more: Large downloads, targeted improvements: Cloudflare origin range requests
On November 10, 2026, support for .NET 8 and .NET 9 ends on the same day. What this means for your business applications and how to move safely to .NET 10 now.
Read more: Double End of Support: .NET 8 and .NET 9 Expire on November 10
PostgreSQL 14 gets its final update on November 12, 2026, and PostgreSQL 19 follows a week later. What end of life means for your applications and how to plan a safe upgrade.
Read more: PostgreSQL 14 Reaches End of Life on November 12 – and Version 19 Is Around the Corner
A flaw in GitLab's regex compiler (CVE-2026-110264, CVSS 10.0) lets attackers without an account run code on the server. Who is affected and what to do now.
Read more: RegExplode: Critical GitLab flaw allows code execution without login
A vulnerability in the Node.js Brotli decoder (CVE-2026-111497) can lead to remote code execution. Here is who is affected and what to do.
Read more: Node2Shell: Why You Should Update Node.js Now
Two critical vulnerabilities in PHP itself (CVE-2026-109618 and CVE-2026-109619) let attackers run code on web servers without logging in. Almost every PHP installation is affected. Here is what happened, who needs to act, and what to do now.
Read more: PHPocalypse: What the Critical PHP Flaws Mean for Your Website