<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Safe to Ship</title><link>https://safet2ship.com/news/</link><description>Every item names its sources and the date we checked them. Short, plain-language, with what to do.</description><language>en</language><item><title>Critical PHP flaws: update now</title><link>https://safet2ship.com/news/2026-10-21-critical-php-flaws/</link><guid>https://safet2ship.com/news/2026-10-21-critical-php-flaws/</guid><pubDate>Wed, 21 Oct 2026 12:00:00 GMT</pubDate><description>PHP released fixes on 21 Oct 2026 for two critical bugs that can allow remote code execution without a login. Here is who is affected and what to do.</description></item><item><title>SafePay ransomware: how it gets in and what to do</title><link>https://safet2ship.com/news/2026-10-20-safepay-ransomware-advisory/</link><guid>https://safet2ship.com/news/2026-10-20-safepay-ransomware-advisory/</guid><pubDate>Tue, 20 Oct 2026 12:00:00 GMT</pubDate><description>US, UK and German agencies published a joint advisory on 20 Oct 2026 about SafePay ransomware, which also goes after backups. Here is the plain-language version.</description></item><item><title>BeyondTrust Remote Support flaw is being exploited</title><link>https://safet2ship.com/news/2026-10-16-beyondtrust-remote-support-flaw/</link><guid>https://safet2ship.com/news/2026-10-16-beyondtrust-remote-support-flaw/</guid><pubDate>Fri, 16 Oct 2026 12:00:00 GMT</pubDate><description>CISA says a critical login bypass in BeyondTrust Remote Support, CVE-2026-102764, is under active attack. Patch and check for signs of compromise.</description></item><item><title>Some websites send instructions to AI agents</title><link>https://safet2ship.com/news/2026-10-15-instructions-in-web-headers/</link><guid>https://safet2ship.com/news/2026-10-15-instructions-in-web-headers/</guid><pubDate>Thu, 15 Oct 2026 12:00:00 GMT</pubDate><description>Researchers found hidden messages aimed at AI agents in web page headers. Mostly pranks, but agents that browse the web read text written by strangers.</description></item></channel></rss>