Laravel Headlines
Latest news and coverage for Laravel
Recent Headlines
32 headlinesSecurityOnline.info
Laravel Livewire Vulnerability Exposes Over 6,000 Apps
CVE-2025-54068 in Laravel Livewire is actively exploited, exposing over 6,000 apps and leading to credential theft of millions of records.
Cyber Press
Critical Laravel Livewire RCE Flaw Exploited to Steal Credentials From 6,000+ Apps
Another report on the same major security incident, detailing exploitation and impact.
HEAL Security Inc.
Laravel Livewire Applications Compromised to Steal Credentials Exploiting RCE Vulnerability
Imperva discovered a campaign exploiting CVE-2025-54068 in Laravel Livewire, stealing credentials from over 6,000 apps across multiple sectors.
Cybersecurity Times
Laravel Livewire RCE Vulnerability Exploited
A critical RCE vulnerability in Laravel Livewire (CVE-2025-54068) is being exploited in a large-scale credential theft campaign, compromising over 6,000 applications.
Security Boulevard
CVE-2025-54068 Laravel Livewire Credential Theft Campaign: 6,000+ Applications Compromised
A critical RCE vulnerability (CVE-2025-54068) in Laravel Livewire v3 was exploited in a large-scale credential theft campaign, compromising over 6,000 applications.
PHPNews
The artisan dev Command in Laravel 13.16.0 - PHPNews
Laravel 13.16.0 introduces a new artisan dev command, enum-aware request helper, withCookies method, and array maintenance mode driver.
Laravel News
Typed Translation Accessors in Laravel 13.15.0 - Laravel News
Laravel 13.15.0 adds typed translation accessors, JSON Schema deserialization, a dedicated Cloud queue driver, and security fixes.
Laravel
Your Laravel Cloud Stack Now Scales to Zero&Wakes 20x Faster | Laravel - The clean stack for Artisans and agents
Laravel Cloud now scales full stack to zero and wakes 20x faster, with new $5 Starter plan and spending limits.
Tech Times
Laravel Supply Chain Attack Backdoors 5,561 Repos: Git Tag Rewrite Defeats Version Pinning
Laravel-Lang supply chain attack using Git tag poisoning backdoored over 5,500 repositories.
Security Affairs
Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning Attack
Attackers poisoned four Laravel-Lang Composer packages by rewriting Git tags, injecting malware that steals credentials.
BleepingComputer
Laravel Lang packages hijacked to deploy credential-stealing malware
A supply chain attack compromised Laravel Lang localization packages, rewriting GitHub tags to distribute credential-stealing malware that harvests cloud and developer secrets.
Snyk
Laravel Lang Supply Chain Advisory | Snyk
Snyk advisory details the Laravel Lang supply chain attack where malicious versions of localization packages were published, stealing credentials and secrets.
Socket
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Socket Research Team reports that Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
DEV Community
Laracon EU 2026: What Amsterdam told us about the future of Laravel - DEV Community
Recap of Laracon EU 2026 covering Laravel 13, AI SDK, and other announcements.
Laravel Blog
Introducing Laravel PAO: Cleaner Output for AI Agents | Laravel - The clean stack for Artisans and agents
Laravel PAO optimizes PHP tool output for AI agents by returning structured JSON and cleaning console output when an agent is detected.
Laravel News
DHH Joins Laravel Live Denmark 2026 for Fireside Chat with Taylor Otwell - Laravel News
DHH, creator of Ruby on Rails, will appear at Laravel Live Denmark 2026 for a fireside chat with Taylor Otwell, hosted by Mathias Hansen.
Laravel News
Laravel Introduces First-Party Passkey Authentication Support - Laravel News
Laravel released first-party passkey authentication packages with WebAuthn support for passwordless auth.
Laravel News
Laravel's AI SDK adds sub-agents - Laravel News
Laravel's AI SDK now supports sub-agents, allowing agents to be used as tools for orchestration.
Laravel News
Laravel ClickHouse: A Full-Featured ClickHouse Driver for Laravel - Laravel News
Laravel News covers the Laravel ClickHouse package, which integrates ClickHouse with Laravel's Eloquent, Query Builder, and Schema Builder.
Laravel News
RedBerry to Host Georgia's First Laravel Meetup in Tbilisi - Laravel News
RedBerry is hosting Georgia's first official Laravel meetup in Tbilisi on May 14th, featuring several speakers.
Laravel News
A Free Shift to Check If Your App is Ready for Laravel Cloud - Laravel News
Laravel partners with JMac and Laravel Shift to launch a free static analysis tool that checks if an app is compatible with Laravel Cloud.
Laravel News
Laravel API Starter Kits Are Coming Soon! - Laravel News
Laravel API starter kits are being built on Maestro, the Laravel orchestrator, with pull requests already open for a stateless API and Teams variant.
Laravel News
Spatie Shares Their Coding Guidelines as AI Skills - Laravel News
Spatie open-sourced their internal coding guidelines as reusable AI skills, compatible with Laravel Boost.
Laravel News
Passage: A Lightweight API Proxy Gateway for Laravel
This article introduces Passage, a lightweight API proxy gateway designed for Laravel applications, offering a clean solution for integrating API proxy functionality without a full enterprise gateway.
Stackademic Blog
Laravel 13 Came Out and I Actually Read the Whole Release Notes
This blog post discusses the release of Laravel 13, with the author detailing their experience of thoroughly reviewing the release notes and highlighting key changes and features.
COSS Weekly Newsletter
Stay up to date with the latest news, funding rounds, and announcements from the COSS universe.
Check out COSS Weekly on the webLatest Content from Chinstrap Community
View allCOSS Weekly – Week of July 27, 2026
This week in COSS: On the funding front, Databricks raised $3 billion at a $188 billion valuation, e...
COSS Weekly – Week of July 20, 2026
This week in COSS: Nous Research, the startup behind the OSS Hermes agent, is in talks to raise mew ...
Battle of the Software Acronyms: BYOC Is Beating SaaS, but the Winner is COSS
On June 15, 2026, Ververica, a company founded by the original creators of the open source Apache Fl...
COSS Weekly – Week of July 13, 2026
This week in COSS: Ollama raises a $65M Series B, Bespoke Labs announces a $40M Seed and Series A, a...
COSS Weekly – Week of July 6, 2026
This week in COSS: Together AI announced an $800M Series C to accelerate the shift to open-source AI...
COSS Weekly – Week of June 29, 2026
This week in COSS: The acquisition trend continued as Qualcomm agreed to acquire Modular for nearly ...
COSS Weekly – Week of June 22, 2026
This week in COSS: Databricks reported annualized revenue of $6.9 billion — up over 80% year-over-ye...
COSS Weekly – Week of June 15, 2026
This week in COSS: The recent flurry of COSS M&A activity continues as VoidZero was acquired by Clou...

