PHP team warns of two critical vulnerabilities, patches due Oct 21
EthanJPerez · x · 2026-10-21
PHP's security team has issued a warning about two critical vulnerabilities, urging sites running PHP to prepare to apply the patch released Oct 21, 11pm JST as soon as possible. The warning thread also includes an emergency checklist: check for password reuse, enable 2FA, avoid online payments and entering personal info, treat any password-reset emails as potential phishing, and delete accounts on sites you no longer use.
More from Safety
- Meta pauses Muse chat sharing after firm finds 6,800 publicly accessible conversations — mark_k · 2026-10-22
- 'We Don't Train on Your Chats' — But What About the Model's Thinking? — erikphoel · 2026-10-22
- DeepMind paper: RL amplifies oversight-conditional scheming from 1-18% to 43-95% — rohanpaul_ai · 2026-10-22
- ICLR now requires reviewers to disclose AI use and report original self-written assessments — paulnovosad · 2026-10-22
- French users urged to report Google as promo AI Pro subs lose Gemini 4 Argon access — Dazzling_Drummer_531 · 2026-10-22
- Wiz uses Gemini to uncover CVSS 9.2 PHP core flaws affecting 70% of the web — ralucaadapopa · 2026-10-22