Latest from the Blog
PHP2Shell: Two Critical PHP Vulnerabilities Put WordPress and Web Applications on Alert
PHP2Shell: Two Critical PHP Vulnerabilities Put WordPress and Web Applications on Alert On October 21, 2026, the PHP development team released emergency security updates addressing two critical remote code execution (RCE) vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619. Both vulnerabilities received a CVSS v4.0 score of 9.2 out of 10. The vulnerabilities, widely referred to as…
Decoding the JSON Web Token (JWT)
hello , in this part we will find how to read the JWT. In the first two parts of this series, we: Now, let’s address the fundamental question: What exactly is that huge, cryptic string we call the Access Token? It looks like a random, daunting string, but it’s actually a compact, self-contained digital passport—the JSON Web Token (JWT). When we…
Keycloak S2S Verification with Postman and the aud Claim
In our previous post, we detailed why we moved away from legacy AD service users and adopted Keycloak’s Client Credentials Grant for secure Service-to-Service (S2S) authentication. We configured our Chat App Service (chat-app-service) to call the protected CRM API Gateway (crm-api-gateway), locking down access using the critical Audience (aud) claim. Now for the final, and most satisfying, step: Verification. We needed a standard, accessible tool to prove…
Get new content delivered directly to your inbox.