PHP2Shell: No Full Workaround Exists Before Today's PHP Patch
Two critical PHP flaws, named PHP2Shell and rated 9.2 of 10, will be fixed at 14:00 UTC on October 21. No official workaround exists, and a circulating setting is not enough alone.
Newsroom
Cybersecurity news, advisories and updates
Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
Showing 3
#Web Security Remove
Threat advisoriesCritical
Critical Remote File Inclusion Vulnerability Disclosed in WordPress Core
A critical remote file inclusion vulnerability in WordPress Core permits unauthenticated attackers to execute arbitrary code by forcing page-template resolution to include local PHP files outside theme directories.
Threat advisoriesCritical
Critical WordPress Plugin Flaw CVE-2026-85097 Under Active Exploitation
A maximum-severity vulnerability in the Bricksforge WordPress plugin is being actively exploited, allowing unauthenticated attackers to execute arbitrary code remotely.
Trust
Built around the regulators you answer to
SAMA
Saudi Central BankCSF · BCM · CRFR
NCA
National Cybersecurity AuthorityECC-2:2024 · CSCC · CCC
SDAIA
Saudi Data & AI AuthorityPDPL
CMA
Capital Market AuthorityCSG
CST
Communications, Space & Technology CommissionCRF
14regulatory frameworks
Ready to talk about your compliance?
Tell us where you stand. We will show you the shortest path to what your regulator expects.