Tomorrow! CMS Conf Vilnius - a day of talks on the future of the web 🤓 Doors at 10am - 🎟️ grab your free ticket here: https://luma.com/y3l3787n
Patchstack
Computer and Network Security
Parnu, Province / State 8,131 followers
Patchstack helps web developers to easily secure web apps from third-party component vulnerabilities.
About us
Patchstack is the leader in open source software vulnerability intelligence, covering the entire lifecycle from detection to mitigation.
- Website
-
https://patchstack.com
External link for Patchstack
- Industry
- Computer and Network Security
- Company size
- 11-50 employees
- Headquarters
- Parnu, Province / State
- Type
- Privately Held
- Founded
- 2021
- Specialties
- Website Security, Website Monitoring, Web Application Security, Web Application Monitoring, Cyber Security, Cyber Security Platform, Web Security Platform, and Website Security Platform
Employees at Patchstack
View 51 employees at Patchstack
or
Locations
-
Primary
Get directions
Akadeemia 1, Forwardspace
1
Parnu, Province / State 80011, EE
Updates
-
⚠️ Important updates on the ongoing industry-wide PHP security issue. This is an actively exploited issue, affecting all PHP-based applications. Several services, including The SEO Framework, 4chan and major Japanese platforms, have taken servers offline until the patch is released. Currently only fix is to update affected PHP versions as soon as updates are available - these are scheduled for Oct 21, 2pm UTC. If unable to do so, confirm your hosting provider will handle the update. 🔗 Follow official PHP channels for news on the update: https://www.php.net/ We are sharing partial mitigations & workarounds in our live post - see link in comments:
-
⚠️ Important: critical PHP vulnerability release imminent. ⚠️ Significant impact across WordPress, Drupal, Joomla, Magento. Be ready to update your PHP version - It is scheduled for Wednesday, 21 October 2026 at 14:00 UTC. Developing story - watch this channel for more info.: *** ⚠️ Update 07:34AM UTC *** - multiple active exploitation incidents confirmed *** Update 13:20 *** - Several services, including The SEO Framework, 4chan and major Japanese platforms take servers offline until the patch is released. *** ⚠️ Update 13:20 *** - we have updated our post with potential workarounds before PHP update is available. Link in comments.
-
🚨 Stolen UpdraftPlus keys are currently being used to actively backdoor WordPress sites. 🛡️ Patchstack customers are protected - these attacks do not rely on a vulnerability, but we have deployed additional rules to mitigate the issue Link in comments with more detail & what non-Patchstack users must do:
-
A behind-the-scenes look of Patchstack's NodeJS vulnerability mitigation working inside Lovable 💚 (very questionable prompting though):
This is an unfiltered (but *heavily* shortened) internal demo of Patchstack 's new Node JS vulnerability mitigation feature working inside Lovable. 👀 I wanted to create a teaser & show you what we've been building - but honestly it was easier to just publish an internal meeting. Enjoy this cinematic masterpiece, next video from my bed probably.
-
Only 10 days to go until CMS Conf Vilnius! 👀 What: Talks, demos and discussions from the AI frontlines 📍Where: Tech Zity Vilnius - Panerių g. 43, 03202 Vilnius, Lithuania 📆 When: 24.10, 10AM
We're teaming up with the amazing CMS Conf team for a one-day mini conference in Vilnius, Lithuania 💚 🇱🇹 There's a lot happening right now with AI, so our goal was to do an event where people can hear real-life, practical examples of what web professionals are doing with it - but also chat & share experiences on the spot. have some interesting topics already lined up: ⚙️ A practical demo on how to turn an AI website into an actual maintainable project by Aurimas Butvilauskas 💣Lessons Learned from 1,000 data breaches by Lukas Vileikis 💩 A talk titled "Ship Happens" by Kristaps Kokins (leaving this one to your imagination) 📅 24.10, starting at 10AM at Tech Zity Vilnius Grab a free ticket here! https://lnkd.in/d2J5Yvwu
-
-
“Can I trust what AI puts in my app?” That question came up again and again at Pärnu CoastHack, where builders shipped prototypes with Claude Code, Codex, Lovable, and literally whichever platform still had credits left. It’s also why we showed Patchstack for JavaScript in public for the first time. 🚀 Vibe-coded apps carry two kinds of risk, and our new upcoming offering covers both: 📦 Known vulnerabilities in the dependencies AI pulls in, flagged by our threat intelligence 🔑 Live output filtering that redacts API keys and secrets before they leave your app, even when the custom logic has a hole Several teams were building health and education tools at the hackathon, where a leaked AI key or exposed personal data gets very serious, very fast. Every participant got free early access, and we got great feedback in return. 🤝 We’ve spent years making WordPress security approachable for people who aren’t security experts. Now we’re doing the same for the new generation of builders. Wider access is coming soon, so keep your eyes peeled. 👀 #VibeCoding #AppSecurity #JavaScript
-
👀 Well… giving the Pärnu CoastHack main prize to another cybersecurity product definitely wasn’t on our bingo card, but it was definitely very well deserved! We’re just happy to see the security of vibe-coded sites getting more attention. 😎
🌊 Pärnu CoastHack 2026 – 48 hours of ideas, technology, and people brave enough to build. From 2–4 October, nearly 100 entrepreneurs, developers, designers, students and tech enthusiasts came together in Pärnu – with participants joining us from Estonia, Latvia, Lithuania, Finland, the UK, Australia and Mexico. More than 30 ideas were pitched on Friday. By Sunday, 22 teams made it to the finals, after a weekend of validating ideas, talking to users, building prototypes, experimenting with AI and vibe coding, working with mentors and practising their pitches. 🏆 The winner – SafetyVibe SafetyVibe is building a solution for checking the security of AI-generated apps and identifying potential vulnerabilities. The team received the 1,500€ main prize from Patchstack, plus three personal coaching sessions from LHV. ✨ Special prizes went to: 🚁 Drone Network – 2,480€ worth of mentoring support from the City of Pärnu. 🔐 InScope – a place in the 9-month Pärnumaa Business Incubator programme. 🎁 Saya – €100 Astri gift card for each team member from Pärnu Keskus. Teams also received conference passes from Digit Conference, sTARTUp Day and Latitude59 coworking opportunities from Palo Alto Club, Forwardspace Coworking Space and Mobispace, web hosting from Veebimajutus.ee and other support from our partners to help them keep building after the hackathon. 🚀 But CoastHack was about much more than prizes. We kicked off with Founder Stories #2 with Carl Rannaberg and Oliver Sild. Maarja Pajusalu helped teams turn ideas into prototypes through vibe coding, Elliot Taylor shared how to build more securely with AI, and throughout the weekend our mentors challenged teams, shared experience and helped ideas move forward. 💚 A huge thank you to our mentors, jury, moderator Mayri Tiido, workshop leaders, volunteers, partners and supporters who made the weekend possible. And the biggest thank you goes to our participants – for bringing your ideas, skills and curiosity, finding new teammates, experimenting, changing direction, building, testing and finally stepping onto the stage to show what you created. Pärnu CoastHack was organised together by Forwardspace, Pärnumaa Ettevõtlusinkubaator and Pärnu HUUB. Our collaboration goes far beyond one hackathon: we want to bring entrepreneurial and tech-minded people together in Pärnu, help ideas grow and create more reasons to build something new right here. See you at the next Pärnu CoastHack! 🌊🚀 Pärnu CoastHack is organised in cooperation with the Estonian Business and Innovation Agency (EIS) and funded by the European Union through the European Regional Development Fund under the Startup Estonia programme. 📸 Photos by Karoliine Aus. More to come.
-
-
-
-
-
+5
-
-
Imagine malware that plants an invisible admin in your site (case study incoming 👀) Our researchers just took apart a WordPress malware campaign that enters through stored XSS in Ninja Forms (500K+ installs) and WPC Product Bundles. It fires when an admin opens a form submission or order, then plants: ➡️ one visible admin account 👻 one hidden admin the Users screen can't show ➡️ a magic login URL that signs in as the site owner ➡️ an unauthenticated file manager Remove the vulnerable plugin and three of those four doors stay open. Patchstack users are protected from the vulnerabilities mentioned🛡️. Full technical analysis and IoCs in the comments 👇