https://mspblueteam.com/blog/ Security and compliance news from MSP Blue Team: CMMC, NIST 800-171, and the vulnerabilities worth knowing about. en-us https://mspblueteam.com/blog/php2shell-critical-php-vulnerabilities.html https://mspblueteam.com/blog/php2shell-critical-php-vulnerabilities.html Thu, 22 Oct 2026 12:00:00 +0000 Two critical vulnerabilities in the PHP runtime itself — not in any specific application — mean a perfectly secure WordPress or custom site can still be exposed. Here's what to check right now. https://mspblueteam.com/blog/october-2026-patch-tuesday-net-framework.html https://mspblueteam.com/blog/october-2026-patch-tuesday-net-framework.html Thu, 15 Oct 2026 12:00:00 +0000 Microsoft's October 13 release was one of the largest Patch Tuesdays of the year. The .NET Framework update (KB5127684 and its counterparts) is worth moving to the top of the queue. https://mspblueteam.com/blog/cmmc-phase-2-pause.html https://mspblueteam.com/blog/cmmc-phase-2-pause.html Sat, 18 Jul 2026 12:00:00 +0000 The Department of War paused the CMMC Phase 2 rollout in July 2026 for a program review. Here's exactly what's on hold, what hasn't changed, and what contractors should still be doing right now.