#Vulnerabilities

Rethinking web application security in an ever-changing threat landscape

Yaz Bekkar of Barracuda discusses the need to rethink web application security given that apps average 20 vulnerabilities.

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Two critical bugs discovered in PHP, which powers roughly 70% of websites, have prompted widespread emergency patching efforts across organizations.

CISA confirms attackers are exploiting both PHP2Shell flaws

CISA adds two PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to its Known Exploited Vulnerabilities catalogue, with a deadline for federal agencies to patch by October 29.

Last Week’s Critical PHP Warning Was the Tip of the Web Vulnerability Iceberg

AI is uncovering new security vulnerabilities in web infrastructure faster than they can be patched, raising concerns about internet safety.

Cutting both ways: AI sharpens systems protection while opening new exploits for malicious actors

AI models are enabling faster identification of software and system vulnerabilities, but malicious actors can exploit the same capability to discover new attack vectors.

We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue

A podcast episode from The Register examines the PHP2Shell vulnerability crisis and the systemic security issues plaguing decades-old internet infrastructure.

PHP2Shell: Who Is At Risk And How Can Businesses Stay Safe?

Critical vulnerabilities in PHP itself called PHP2Shell allow unauthenticated attackers to execute code on vulnerable servers; fixes were released October 21, 2026.

Understanding PHP2Shell vulnerabilities and reducing risk while you patch

Critical PHP vulnerabilities disclosed this week pose security and business continuity risks; article discusses mitigation strategies while systems are patched.

PHP2Shell was only the beginning: AI is accelerating the patch race

A PHP vulnerability (PHP2Shell) caused widespread outages across European government websites, highlighting how AI-accelerated vulnerability discovery is outpacing patch deployment in the open-source ecosystem.

HPE patches eight max severity RCE and auth bypass AOS flaws

AI is turning vulnerabilities into attack paths and enterprises must change how they defend

AI is enabling attackers to combine vulnerabilities and compromised identities into coordinated attack paths, forcing enterprises to rethink their defense strategies.

What’s going on with the web? The PHP issue and sites going offline

Multiple websites have gone offline following the discovery of critical security vulnerabilities in PHP, a protocol used by most websites.

Internet on Alert as AI Uncovers Critical Flaws in PHP Used by 70% of Websites

AI models discovered critical vulnerabilities in PHP affecting 70% of websites, with a 9.2 severity score. Multiple security breaches including an SBI data leak also emerged in October.

The internet is having a very bad cybersecurity day

Multiple security vulnerabilities surfaced this week, including AI-discovered PHP flaws, Node.js issues, and problems in the LiteLLM AI tool, creating urgent concerns for cybersecurity teams.

Explained: What is PHP and why did it take government websites offline?

PHP developers released patches for critical vulnerabilities; EU officials warned organizations to take vulnerable websites offline if patches cannot be applied immediately.

PHP Vulnerabilities Could Put Much of the Internet at Risk, Experts Warn

Security experts warn that PHP vulnerabilities could potentially affect up to 70% of websites on the internet.

Two dangerous internet security issues are putting site admins on edge

Two severe internet security vulnerabilities were discovered, creating significant concerns for website administrators.

PHP warns admins of two critical flaws, emergency patches coming tomorrow

The PHP security team is releasing emergency patches tomorrow for two critical vulnerabilities after details about the flaws reportedly leaked ahead of scheduled disclosure.