PHP releases emergency patches for critical PHP2Shell RCE bugs
Unauthenticated attackers can run code as the web worker, and Cloudflare says it already saw early exploitation attempts.
92
Organization
UK National Cyber Security Centre
- Mentions · 7d0
- Mentions · 30d2
- All mentions7
- First seenAug 12, 2026
- Last mentioned21d ago
Timeline
7 articles · newest firstPHP project issues critical security release; sites urged to update
Two critical flaws affect any PHP application; no WordPress update is planned, and PHP before 8.2 is unsupported.
68
AI is set to help cyber attackers much more than defenders, says UK official
UK NCSC warns AI may enable harder-to-detect cyberattacks and that automated defense lacks a clear success signal.
10
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
AI-assisted bug hunting drives record vulnerability disclosures, with 66,401 CVEs logged in 2026 so far, nearly double last year's pace, straining defenders and open-source maintainers.
50
NCSC Warns Shadow AI Creates New Security Risks
UK NCSC warns that unapproved AI tools used by 71% of UK employees expose corporate data and create hard-to-detect organizational security risks.
48
Ncsc Raises Alarms Prompt
The UK NCSC raised alarms about prompt injection risks in LLM-integrated systems, urging organizations deploying AI to review exposure.
48
Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery
Microsoft patches 419 vulnerabilities in record-breaking Patch Tuesday; Windows Winsock zero-day CVE-2026-68820 is actively exploited by Lazarus Group.
80
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-688209%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-628323%7.8Local Privilege Escalation via Link Following in Windows User Profile Service
Appears with
- Microsoftvendor · 3
- NCSCorganization · 2
- cve.icuorganization · 1
- Empirical Securityorganization · 1
- Anthropicvendor · 1
- Five Eyesorganization · 1
- WordPressorganization · 1
- Mythosproduct · 1
- Oracle patchesproduct · 1
- Oraclevendor · 1
- PHP projectorganization · 1
- Mythosai model · 1
- Firefoxproduct · 1
- PHPvendor · 1
- Google Chromeproduct · 1
- Windowsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.