It’s Worse Than We Thought: AI Has Taken the Clock Off Cyberattacks. What Companies and Users Should Do Now

A large turquoise ocean wave rising far out at sea behind a small white coastal plant with two round tanks, under a clear blue sky
US agencies say attackers use AI-written scripts against industrial controllers. Microsoft ties an agentic AI framework to the ConnectWise supply-chain compromise, with privileged cloud access in under three hours. OpenAI expects AI-found critical vulnerabilities to rise sharply. What the primary sources confirm, what is a forecast, and the basics companies and users should act on now.
View Post

PHP2Shell and a Node.js Security Release on the Same Day: What to Patch, Restart and Check Now

A technician in a light grey shirt slides glowing turquoise server modules into an open white rack in a bright data hall with tall windows and blue sky
PHP fixed two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619 (PHP2Shell), in 8.5.12, 8.4.27, 8.3.36 and 8.2.35. On the same day, Node.js shipped fixes for ten vulnerabilities in 22.23.4, 24.22.1 and 26.12.1. What changed, who is exposed, which cloud platforms patch for you, how to check your version, and a patch-and-restart checklist for website owners, small businesses and admins.
View Post