US agencies say attackers use AI-written scripts against industrial controllers. Microsoft ties an agentic AI framework to the ConnectWise supply-chain compromise, with privileged cloud access in under three hours. OpenAI expects AI-found critical vulnerabilities to rise sharply. What the primary sources confirm, what is a forecast, and the basics companies and users should act on now.
Browsing Tag
patch management
2 posts
PHP2Shell and a Node.js Security Release on the Same Day: What to Patch, Restart and Check Now
PHP fixed two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619 (PHP2Shell), in 8.5.12, 8.4.27, 8.3.36 and 8.2.35. On the same day, Node.js shipped fixes for ten vulnerabilities in 22.23.4, 24.22.1 and 26.12.1. What changed, who is exposed, which cloud platforms patch for you, how to check your version, and a patch-and-restart checklist for website owners, small businesses and admins.