Cybersecurity Vulnerabilities

Critical PHP flaws rated 9.2 severity prompt emergency patch advisory

PHP's maintaining agency disclosed two critical vulnerabilities on Tuesday, with fixes scheduled for release Wednesday at 10 a.m. ET. The flaws, rated 9.2 out of 10 in severity, could let attackers compromise websites built on PHP, which the Wall Street Journal estimates powers 70% of the internet. Agencies including the NSA and UK's NCSC urged administrators to patch immediately or take sites offline, while Cloudflare said it had deployed a firewall fix and security firm watchTowr reported early signs of exploitation attempts.

cnet.com · 2026-10-21

AI Accelerates Vulnerability Discovery, Widening Gap With Patching Capacity

AI tools are enabling security researchers and attackers alike to uncover software vulnerabilities at a much faster pace than organizations can remediate them. This growing mismatch is emerging just as regulators tighten disclosure and compliance requirements around cybersecurity.

darkreading.com · 2026-08-24