PHP releases fixes for two critical runtime vulnerabilities
PHP has released patches for two critical vulnerabilities that can expose applications to unauthenticated remote code execution and memory disclosure, Google Cloud said October 21. CVE-2026-109618 and CVE-2026-109619 affect PHP 5....
UK watchdog reprimands Ogi Networks and Data Cymru over children's data breach
The UK Information Commissioner's Office has reprimanded Ogi Networks Limited and Data Cymru over security failures that exposed personal information belonging to 3,300 people, mostly children, the BBC reported. Attackers accessed...
Meta pauses Muse sharing after researchers uncover discoverable private conversations
Meta has suspended Muse's sharing feature while reviewing researchers' findings that shared conversations could be discovered by people who had never received their links. Security firm Claroc said it enumerated 6,800 links and fo...
Brotli flaw extends beyond Node.js to Python and other HTTP software
A critical Brotli decompression flaw affects Python packages and other HTTP software beyond Node.js, security company Aikido reported on October 23. Crafted compressed data can corrupt memory, leak information, crash a process or ...
CISA adds PHP2Shell detection rule and urges unpatched systems offline
CISA updated its PHP2Shell alert with a SIGMA detection rule to help identify potentially suspicious activity and added partner resources. The agency urged organizations unable to update immediately, or using unsupported PHP 8.1 ...
OpenAI says frontier training runs now use an offline web environment
OpenAI says all its frontier reinforcement learning runs now use cached and indexed web content instead of live internet access, PCMag Middle East reports. The environment lets models practice browsing, searching and using web app...
