PHP: the critical part of the Internet that few knew about (until today!), says cyber expert Professor Bill Buchanan ...

October 21, 2026 brought a demanding mix of emergency security updates, poisoned software releases, and warnings about ...

A lot has happened in cybersecurity in the past 24 hours. From eMudhra’s weak security keys to ChatGPT finding critical flaws ...

The vulnerability, which was discovered by artificial intelligence, is in the PHP programming language which powers millions ...

Governments and companies are scrambling to protect their websites, as Amazon says it experienced attacks before the warning ...

At scale, a credible worst case is an automated campaign compromising unpatched sites, leading to data theft, fraud and ...

Authorities in Europe, Asia and other continents have temporarily taken some government websites offline to protect against newly discovered security vulnerabilities in a programming language used to ...

On October 21, 2026, an emergency patch for PHP was released. PHP is a programming language used on servers, and WordPress is ...

The cybersecurity issue does not impact everyday consumers' phones or devices but rather the popular websites they may use.

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...

Some organizations have temporarily taken websites and online services offline rather than leave potentially vulnerable ...

PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution on PHP servers; patch to 8.2.35 or later now.