Researchers Warn of Upcoming Critical PHP Flaws
The two flaws are CVE-2026-109618 and CVE-2026-109619 and are said to affect PHP versions 5, 6, 7, and 8.
Researchers Warn of Upcoming Critical PHP Flaws
October 20, 2026 | 2 min read
Go to previous slide
Go to slide 1
Go to slide 2
Go to slide 3
Go to next slide
The Latest
Ongoing Microsoft 365 Campaign Abuses ConnectWise App
Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication.
Read More Ongoing Microsoft 365 Campaign Abuses ConnectWise App
The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
Nolan casts the invention of the Trojan horse as the ultimate violation of “Zeus’s law,” the idea that you should treat any stranger you encounter with kindness and respect, because they could very well be Zeus in disguise.
Read More The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
Ivanti Connect Secure Zero-Day Exploited in Attacks
Ivanti warns of active exploitation of CVE-2026-104935, a high-severity Connect Secure flaw.
Read More Ivanti Connect Secure Zero-Day Exploited in Attacks
Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
Two years after the largest healthcare cybersecurity incident in history, the senate has passed The Health Care Cybersecurity and Resiliency Act of 2025.
Read More Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
Patching Faster Has Never Been the Answer
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware
FortiBleed attacks are continuing, with the FBI and Secret Service warning of compromised Fortinet firewalls, account lockouts and potential ransomware activity.
Read More FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware