News
Critical PHP Bugs Prompt Global Patch
Two PHP vulnerabilities (CVE‑2026‑109618, CVE‑2026‑109619) allowing unauthenticated remote code execution were patched on Oct 21; banks, retailers, hospitals and governments temporarily shut down systems to apply fixes, with Amazon detecting early exploitation and a surge in attack attempts reported by Cloudflare.