The police said Sandra Birchmore's death was a suicide. Then the FBI accused a cop of murder

A former Massachusetts police detective is being tried on charges that he killed a pregnant woman to hide that he had begun ...

What is a critical PHP vulnerability? Impact on WordPress sites and immediate measures you can take

In October 2026, a critical vulnerability was announced for "PHP," a programming language widely used in website development ...

How much have you verified 'PHP patched'? | Learning AI verification, follow-up questions, and internal reporting through 4 answers

When managing a company website, even if you see news about 'PHP vulnerabilities,' you cannot see inside the server. Even if ...
Cyber Security News

Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware

PHP2Shell flaws face botnet attacks, but Sophos found only failed exploit attempts and no confirmed compromises.

Oh Dear Finds 18.8% of Monitored Sites Down at the Peak of the October PHP Incident

More than 40 hours later, the share of sites down was still more than twice the level measured a week earlier. Taking a ...
Cyber Security News

Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites

Hackers exploit PHP2Shell flaws to attack university and business websites, using public code to execute commands on ...
Latin Times on MSN

PHP2Shell: AI found the bug hiding in 70% of the web. Millions attacked. Patch now

PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 triggered millions of attacks worldwide. Banks went dark. Here's what ...
The Hacker News

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access ...
YAHOO!

PHP exploitation moves at slower-than-expected pace, but millions remain at risk

Security researchers warn that millions of websites remain at risk as exploitation attempts against two critical flaws in PHP have surged.  The vulnerabilities, tracked as CVE-2026-109618 and CVE-2026 ...
shattered.io

PHP Flaw Hits 793 of 1,488 Crypto Domains [2026]

SlowMist found PHP on 793 of 1,488 crypto domains as CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2) put exchanges on alert.

'It's a speed program, not a brute force problem': Nikesh Arora warns AI cyberattacks could outpace defences

Nikesh Arora warned that tackling PHP vulnerabilities requires more than patches. Organisations must modernise infrastructure ...

What Is PHP and How Did a Hidden Bug Put Websites Worldwide at Risk?

A critical PHP vulnerability has sparked millions of exploit attempts, putting websites at risk of cyberattacks and data ...