Latest

15:10The AI bubble is paying itself. It's time to ask who the customer is 15:00Amazon in talks to buy Israeli startup Decart: an AI deal worth up to $7 billion 14:45Wiz founders go from cyber to burgers: frontrunners for McDonald's Israel franchise, and also eyeing CAL 14:30A decisive night for tech: Microsoft and Google report tonight, and the Fed decides on rates 14:15Nvidia and AMD invest $4 billion in shares of Meta, which buys AI chips from them 14:00Cybersecurity: a startup founded by former DOGE staffers got inside Anthropic's internal systems using AI agents 13:50Cybersecurity company Upwind closes $400 million round at a $3.8 billion valuation 13:35Anthropic AI model built working exploits for Chrome, Safari, Android, Windows and Linux

15:10The AI bubble is paying itself. It's time to ask who the customer is 15:00Amazon in talks to buy Israeli startup Decart: an AI deal worth up to $7 billion 14:45Wiz founders go from cyber to burgers: frontrunners for McDonald's Israel franchise, and also eyeing CAL 14:30A decisive night for tech: Microsoft and Google report tonight, and the Fed decides on rates 14:15Nvidia and AMD invest $4 billion in shares of Meta, which buys AI chips from them 14:00Cybersecurity: a startup founded by former DOGE staffers got inside Anthropic's internal systems using AI agents 13:50Cybersecurity company Upwind closes $400 million round at a $3.8 billion valuation 13:35Anthropic AI model built working exploits for Chrome, Safari, Android, Windows and Linux

Thursday, October 29, 2026

Search

What are you looking for?

2 stories for “CVE-2026-109618”

Cyber & Security

US cyber agency confirms PHP2Shell flaws are being exploited, with a patch deadline tomorrow

CISA added the two critical PHP vulnerabilities to its list of actively exploited flaws and ordered federal agencies to patch by October 29. Those who cannot update are told to take their servers offline.

Omer Levin, Cyber Correspondent / 3 min read

Cyber & Security

PHP2Shell: AI models found a critical flaw in the language that runs most of the web

Two severe PHP vulnerabilities allow remote code execution without authentication. Patches are out, exploitation attempts are already here, and there is no safe workaround.

Omer Levin, Cyber Correspondent / 3 min read