A storefront you own, on the AWS account you already have.
What a rule change at GitHub, AWS, a hosted shop, or a payment platform means for a store you deploy yourself.
PHP2Shell, CVE-2026-109618 and CVE-2026-109619, can run code on an unpatched PHP worker without a login. Fixed releases are 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
GitHub's notice asks eligible accounts to enroll in two-factor authentication. The rules are in GitHub's docs. This is how to bind Google Authenticator.