Cyber Incidents USA 2026-27

[sharon sanders]

AI Just Found a Bug That Puts up to 70% of the World’s Websites at Risk​

Updated Oct. 21, 2026 at 6:05 pm ET
First, artificial intelligence heralded the Bugmageddon. Now it is triggering an all-hands-on-deck cyber emergency.
The creators of PHP, a technology that powers as much as 70% of the world’s websites, disclosed a critical security issue Wednesday that could be leveraged by hackers to take control of any system running its software. That would allow an attacker to steal information or launch a cyberattack on anyone visiting a hacked website.

Copyright

https://www.wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websites-at-risk-fd0902ea

FluTrackers installed the fix yesterday as soon as we were notified. Hat tip again to linuxkidd.

 

[Commonground]

Alert Number: I-102326-PSA | 23 October 2026

Critical Vulnerability Alert: PHP Core​

---

In a follow on to the FBI's initial social media posting on October 21st regarding the identified PHP vulnerabilities, the FBI is sharing this PSA to continue to warn the public of the criticality and necessity to take steps to protect any affected networks from these known vulnerabilities. PHP is a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.

Attackers could exploit these vulnerabilities to break into systems, putting sensitive information and business operations at risk. Security updates are available and should be applied immediately. If you are a business owner or website operator, check whether your systems are affected.

The FBI urges organizations to take the following steps now:

• If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
• Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
• Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.

The FBI urges organizations to take the following steps now:

• If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
• Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
• Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.

Report It​

If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or www.ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.

For the latest information, follow PHP's announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA's Known Exploited Vulnerabilities catalog. In addition, CISA released the following guidance, which can be found here. https://www.cisa.gov/news-events/al...ulnerabilities-php-require-immediate-patching

Internet Crime Complaint Center (IC3) | Critical Vulnerability Alert: PHP Core