Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
The PHP security team will release emergency updates on 21 October for two critical flaws rated 9.2 under CVSS v4.0. Details reportedly leaked early; no exploitation in the wild has been observed.
PHP.net has announced a critical update. SANS ISC raised its InfoCon level to yellow, citing PHP's wide use, an expected CVSS score of 9.4 and early proof-of-concept exploits circulating before the patch.
PHP has issued emergency updates for two critical runtime flaws, together called PHP2Shell, that let an unauthenticated attacker run code on a web server. Exploit attempts have emerged, and only updating fully protects…
CISA urges immediate patching of CVE-2026-109618 and CVE-2026-109619 in PHP, which allow unauthenticated remote code execution. No exploitation has been observed so far, but fixed versions are available.
The UK NCSC urges immediate action on two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, that could allow unauthenticated remote code execution. PHP has released a fix.
Two critical PHP flaws, named PHP2Shell and rated 9.2 of 10, will be fixed at 14:00 UTC on October 21. No official workaround exists, and a circulating setting is not enough alone.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
