How-To Guides

More

Business

More

Cybersecurity

More

Smartphones

More
PHP2Shell: Two Critical PHP Flaws Put Kenyan Websites at Risk, and Hosts Are Racing to Patch

PHP2Shell: Two Critical PHP Flaws Put Kenyan Websites at Risk, and Hosts Are Racing to Patch

Two critical vulnerabilities in the PHP engine, collectively named PHP2Shell, can let an attacker run commands on a web server without logging in, and the fix has to be installed on the server itself, not in a website's plugins or themes. The PHP project released patched versions on 21 October 2026, a day earlier than planned, after details leaked online. Kenya is more exposed than most markets: W3Techs data puts PHP on 82.4% of .ke websites whose programming language can be detected.

Caleb Musili • Oct 22, 2026
Senate Committee Rejects Kenya's AI Bill, Saying It Would Regulate Too Much, Too Soon

Senate Committee Rejects Kenya's AI Bill, Saying It Would Regulate Too Much, Too Soon

A Senate committee has recommended that the Senate abandon the Artificial Intelligence Bill, 2026, concluding that the proposed law would burden Kenya's young technology sector with penalties and institutions it is not yet ready to carry. The report, tabled by the Senate Information, Communication and Technology Committee chaired by Trans Nzoia Senator Allan Chesang, was reported by The Star on 15 October 2026.

Caleb Musili • Oct 15, 2026
Anthropic Warns Small AI Models Could Soon Copy Themselves Across Cheap Smart Devices

Anthropic Warns Small AI Models Could Soon Copy Themselves Across Cheap Smart Devices

Anthropic said on Monday that small artificial intelligence models may be only months away from being able to copy themselves across commercial internet-of-things (IoT) devices, including smart ovens and off-brand Android TV boxes, without human help. The findings, from the company's Frontier Red Team, are drawn from controlled experiments and do not describe an attack seen in the wild. They nonetheless point to a category of low-cost, poorly secured hardware that is also common in Kenyan homes and offices.

Caleb Musili • Oct 14, 2026

Cloudflare

More
Cloudflare Just Gave Publishers a Way Out of Google's All-or-Nothing Trap. It Won't Be Enough on Its Own.

Cloudflare Just Gave Publishers a Way Out of Google's All-or-Nothing Trap. It Won't Be Enough on Its Own.

Cloudflare announced on September 15 a new security setting called Disallow AI Training, designed to solve a problem that has quietly reshaped the economics of the open web: the mixed-use crawler trap. For years, the same bot that indexed a site for Google Search also fed that content into Google's AI training pipeline, and site owners had no way to block one without blocking the other. Cloudflare's fix lets a publisher stay indexed in search while refusing to let that same crawler train an AI model on their articles. Apple, Google, and Microsoft have committed to honoring the new preference.

Sandra Safari • Sep 15, 2026
The "Ethical" AI Company Is the Internet's Biggest Taker: Inside Anthropic's Crawl-to-Refer Problem

The "Ethical" AI Company Is the Internet's Biggest Taker: Inside Anthropic's Crawl-to-Refer Problem

Cloudflare tracks something it calls the crawl-to-refer ratio. It's a simple idea. For every page a company's bots crawl, how many actual human visitors does that company send back to the site the content came from?

Caleb Musili • Jul 12, 2026
Cloudflare Says It's Fixing the AI Web. Is It Just Rewarding the Publishers Who Already Won?

Cloudflare Says It's Fixing the AI Web. Is It Just Rewarding the Publishers Who Already Won?

On July 1, 2026, Cloudflare returned with year two of that push. The announcement introduced a new classification system for web crawlers, a dashboard that shows publishers exactly how AI bots are using their content, and an evolution of last year's Pay Per Crawl feature into something called Pay Per Use. The headline change is a September 15, 2026 deadline for so called "mixed use" crawlers, bots that blend search indexing, AI training, and AI agent activity into a single pass. After that date, any crawler that refuses to separate those three purposes will be blocked by default on every page that carries ads, for new customers and for existing free tier customers who haven't changed their settings.

Caleb Musili • Jul 8, 2026

Safaricom

More

Google

More