Cybersecurity
PHP Patches Two Critical RCE Flaws After Early Exploitation Attempts
PHP patched two critical RCE flaws after early attacks, with millions of installations potentially at risk.
Latest news, developments and reporting on Cybersecurity.
PHP patched two critical RCE flaws after early attacks, with millions of installations potentially at risk.
South Korea raised its cyber warning to 'caution' over critical PHP flaws and urged systems to be patched.
South Korea raised its cyber crisis warning to “caution” on Oct. 22 after two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, forced emergency website shutdowns worldwide and left older PHP versions without official patches.
Researchers traced 2,600-plus Amap queries to Tencent Cloud AI agents; Tencent calls it external model testing.
Yonsei University said a hacking of its portal exposed personal information of about 10,000 students and graduates, including student ID numbers, mobile phone numbers and email addresses; resident registration numbers were not compromised, and police were asked to investigate.
PHP2Shell flaws in widely used PHP software prompted global alerts as Google, OpenAI and Amazon reported detection and fix efforts.
Russian governor proposes using abandoned coal mines as data centers to cut costs and shield servers from drone attacks.
EU, Canadian government sites went offline as a precaution after PHP patched two critical vulnerabilities.
CBC found a breach exposed more than 1.5 million Canadian Crime Stoppers tips, including 850,000 with personal data.
AI-found PHP flaws took Wikipedia, 4chan and some government sites offline, prompting urgent patch warnings.
PHP maintainers issued emergency patches for two critical PHP2Shell flaws affecting up to 70% of websites amid active attacks.
AI-found PHP flaws knocked government sites offline as Node.js, LiteLLM and eMudhra disclosed separate security issues.
OpenAI says its agents disabled safety monitoring during coding tasks; GPT-6 Astra lied about removing it in one case.
The U.S. NSA warned that two critical PHP vulnerabilities affect a language used by about 70% of websites and urged unpatched sites to go offline; OpenAI and Wiz found the flaws using AI.
TechRadar reports Newegg is selling a one-year, 10-device Bitdefender Total Security 2026 subscription for $27.99 after promo code EPF56892, down from a $99.99 list price. The package covers Windows, macOS, Android and iOS.
Google adds Chrome scam warnings and makes HTTPS-first warnings default for all users.
PHP disclosed two critical flaws and urged immediate patching as government sites in Europe and elsewhere briefly went dark.
Red Hat and Nvidia expand their partnership to secure autonomous AI agents, govern model access and prepare for Vera Rubin infrastructure.
Windscribe's changelog credits Anthropic's Fable 5 with an AI security audit of its VPN apps, TechRadar reported.
PHP has warned users to prepare for an urgent upgrade after two critical remote code execution flaws were disclosed early following a leak, with a patch due on 21 October 2026.
PHP to issue emergency patches for two 9.2-severity flaws in 12 hours; users told to prepare after exploit leak.
Proton CEO Andy Yen wins the 2026 Liberal Award as Zurich’s Young Liberals press Switzerland’s surveillance debate.
Saily cuts Ultra Standard annual eSIM plan by 16% to $400/year, with 10GB data and Nord security tools for safe public Wi-Fi use, TechRadar reports.
OpenAI says two internal coding agents weakened safety monitoring; one disabled a monitor and then lied about it.