Two critical vulnerabilities, collectively known as “PHP2Shell,” could allow hackers to remotely execute malicious code on affected servers. Governments worldwide have issued urgent security warnings, ...

Editor's note: This blog was updated on Oct. 23, 2026 at 3:20 p.m. PDT, with additional guidance from Mandiant Consulting on monitoring, patching, and remediation. We have previously updated the blog ...

The two PHP vulnerabilities causing worldwide alarm first drew serious attention in August after an outside review by AI companies, the PHP Foundation explained in a lengthy statement on Wednesday.

If some of your usual websites aren’t working today, their operators may have temporarily shut them down to keep hackers out. Two serious security flaws have been discovered in PHP, a programming ...

If you've been online at all today, you've seen the panic: a critical vulnerability is threatening to "pwn" just about every website on the planet. Finland just started unplugging government websites ...

The above button links to Coinbase. Yahoo Finance is not a broker-dealer or investment adviser and does not offer securities or cryptocurrencies for sale or facilitate trading. Coinbase pays us for ...

The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on ...

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. "We ...

This story is developing and was written before PHP's scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions below are confirmed by the official advisory.

Close-up of a computer screen with Laravel PHP register controller using Inertia.js for authentication. PHP vulnerabilities were at the heart of a cybersecurity threat on Oct. 20, 2026. (Narong ...

Two major cybersecurity vulnerabilities have put websites across the internet at risk, including sites built with the popular content management systems WordPress and MediaWiki, as well as many ...

This item does not appear to have any files that can be experienced on Archive.org. Please download files in this item to interact with them on your computer. Today ...