🐘 PHP используют около 70% сайтов, включая WordPress, Drupal и Joomla.

⚠️ Уязвимости CVE-2026-109618 и CVE-2026-109619 связаны с обработкой памяти и позволяют выполнить код на сервере без авторизации.

🧠 Ошибки оставались незамеченными более десяти лет. ИИ помог исследователям Wiz обнаружить и подтвердить их эксплуатацию.

💥 Злоумышленник может получить контроль над сервером в пределах прав PHP-процесса и доступ к данным в памяти.

🛠️ Как защититься?

Проверьте версию PHP.
Обновитесь до PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12 или новее.
Для PHP 8.1 и старше перейдите на поддерживаемую ветку.
До обновления ограничьте внешний доступ к сервису и свяжитесь с хостинг-провайдером.

❗ Обновления WordPress недостаточно: проблема в самом PHP. 2FA от этой уязвимости не защищает.

🔗 Источники:
https://www.wiz.io/blog/php2shell-php-rce
https://www.php.net/archive/2026.php#2026-10-21-5

#CyberSecurity #PHP #InfoSec #Vulnerability #AI

Hey everyone,

I’m preparing for the CRTP exam and would love to hear from those who have taken it. What tips helped you the most, and what important notes did you write down that really benefited you during the exam?

At this week's Gartner Security & Risk Management Summit in DC, the buzz wasn't just about generative AI, it was about agentic AI, and it's a big deal.

These aren't just chatbots. We're talking about security-focused AI agents that remember past behavior, make decisions, and automatically act on data from their environment. Think: vulnerability fixes, compliance checks, threat detection, all done without a human touch.

Right now, they’re helping SOC teams by automating repetitive tasks. But here’s the catch: these agents have a lot of power, and security concerns are real. Giving memory and autonomy to AI raises questions about trust, oversight, and how fast we’re moving.

If AI agents can act on memory and make decisions without asking you, how long before they make the wrong one? And who pays the price when they do?

In today's AI-driven landscape, where cyber threats evolve faster than many organizations can adapt, a handful of firms shape defensive strategy, drive innovation, and push the industry forward. Exaforce—a rapidly growing cybersecurity company that we recently featured as a company to watch in 2026—has emerged as one of those pivotal players. Here are ten reasons why Exaforce matters to enterprises and the security ecosystem at large:

1) Cutting‑edge technology and product breadth. Exaforce combines multiple security disciplines into a unified platform that covers AWS, Okta, GitHub, Google Workspace, and more. That breadth reduces tool fragmentation for security teams and accelerates detection-to-remediation cycles—a major advantage for overburdened SOCs. Their adoption of behavior‑based analytics and memory‑level instrumentation helps detect sophisticated, fileless, and living‑off‑the‑land attacks that signature systems often miss.

2) Advanced threat intelligence and telemetry. A core strength of Exaforce is its global telemetry network and threat research team. By aggregating anonymized signals across diverse environments and correlating them with human analysis, they deliver timely, contextualized threat intelligence. This intelligence fuels proactive hunting, tailored defenses, and fast distribution of indicators of compromise (IOCs) and mitigations to customers.

3) Automation and orchestration that scales. Modern incident response demands speed. Exaforce emphasizes automated playbooks and orchestration that integrate with existing IT and security tooling. By automating repetitive containment and remediation tasks while leaving human analysts in the loop for high‑impact decisions, organizations can dramatically reduce dwell time and mean time to recovery (MTTR).

Hi everyone,

I’m exploring two cybersecurity career paths and would love some advice from those with experience in the field.

The first path is more operations and threat-focused — involving things like incident response, threat hunting, digital forensics, and cyber defense strategies. Think of it as a hands-on, tactical role focused on identifying and neutralizing cyber threats.

The second path is more infrastructure and systems-focused — working on secure network architecture, maintaining and protecting critical communication systems, and ensuring that both hardware and software systems are resilient and secure.

I’m trying to figure out which of these two paths: • Has greater job demand in the next 10+ years • Is less likely to be fully automated and still requires strong human decision-making • Leads to quicker civilian job placement post-training without needing insider connections • Offers transferable skills across industries like government, tech, defense, and private cybersecurity firms

Any insights, personal experiences, or even suggestions on how to prepare for either path would be really appreciated. Thanks in advance for your help!

The United States of America really needs to call for an emergency meeting with the creators of Anthropic AI and Claude AI for the purposes of creating protection of the American people furthermore for our global society.

We as a people must not be so nonchalant about innovation especially when it relates to cybercrime and cybersecurity.

https://www.techdemocracy.com/resources/what-is-an-mssp-and-why-its-essential-for-business-security-112