Decade-old PHP bug puts websites at risk: How AI uncovered it, who is vulnerable and how to stay safe | Explained

PHP2Shell is a pair of critical flaws in PHP’s core engine, CVE-2026-109618 and CVE-2026-109619, that could let attackers run code remotely and steal data without logging in. Wiz Research found them ...

Decades-old flaw in PHP discovered by Google, OpenAI AI tools forces government and public websites to go offline globally

Multiple government portals and public institutions experienced outages due to the revelation of PHP vulnerabilities. In an ...

[Emergency Explanation] The Full Scope of Serious PHP Vulnerabilities (CVE-2026-109618 / CVE-2026-109619) and Security Measures Individuals and Companies Mus…

In October 2026, serious news that shook the world's web infrastructure spread rapidly. Two extremely dangerous ...
Cybernews

PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites

While the world reels from websites being taken down before critical PHP patches were released, Node.js is urging overnight ...
beinsure

Cybertech Blackwall raises $100 mn at $2.2 bn valuation for web security

Estonia-founded cybersecurity company Blackwall raised $100 mn in Series C funding led by AVP to expand AI bot protection and ...
timesofai.com

PHP2Shell Flaws Put Millions of Websites at Risk

Critical PHP2Shell flaws could enable remote code execution and memory leaks, prompting security patches and industry-wide ...

The night AI exposed a 22-year-old hole, the world turned off its own "lights"

The "courage to close" questioned by php2shellThe core of this article (one line)AI has changed the "speed of finding holes." ...
Israel Defense

AI Turns Decade-Old PHP Flaws Into Working Attacks, Exposing Much of the Web

A pair of critical vulnerabilities in PHP, the programming language powering approximately 70% of websites worldwide, could allow attackers to execute code on vulnerable servers without logging in or ...
Unite.AI

PHP Patches Two Critical RCE Flaws Found with Frontier AI Models

The PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 on October 21, 2026, security releases that fix two critical vulnerabilities that can allow unauthenticated remote code execution and ...
CXOtoday

Arctic Wolf Aurora Update: Shadow AI Discovery & Generative Assistant Skills Tackle Enterprise AI Risks

Arctic Wolf today announced at the 2026 Security Operations Summit new capabilities in the Aurora® Superintelligence Platform that help organizations gain visibility into AI adoption, access security ...
Microsoft

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Storm-0940 used ARTEX agentic AI to accelerate a ConnectWise supply chain compromise, enabling application credential abuse ...
InfoQ

TornadoVM 7 Enables GPU-Native Workloads From Java Applications

TornadoVM, an open-source heterogeneous programming framework for Java has reached version 7.0. It automatically accelerates ...