Security
phpBB patches decade-old auth bypass that exposes all forum accounts
Aikido Security discovered a trivially exploitable authentication bypass in phpBB on June 2; a patch landed in version 3.3.17 four days later, though no fix yet exists for the 4.x alpha branch.