Attackers have been abusing PHP object deserialization since before Laravel existed. Here's how those attacks work, and a way to protect against them. #php #laravel https://masteringlaravel.io/daily/2026-08-03-why-unserialize-is-on-every-php-security-checklist