The PHP security team announced an emergency security release for October 21, 2026 at 14:00 UTC, one day earlier than the leaked disclosure date. It addresses two critical flaws, CVE-2026-109618 and CVE-2026-109619 (dubbed php2shell), both rated CVSS v4.0 9.2. Leaked reports cited CVSS 10.0 and an impact reaching back to PHP 5, but PHP ha…
A disruption in Google Cloud's europe-west2 region in London took several Google Cloud services offline on Tuesday. Digital bank Revolut reported a widespread outage at about the same time, including card payments and ATM withdrawals. A person familiar with the matter told Reuters the two events were connected. ING Germany also reported o…
The UK Electoral Commission is developing an AI-powered system to alert candidates and parties to significant deepfakes within three hours of first posting. Chief executive Vijay Rangarajan announced the plan at the Conservative Party conference and cited a deepfake of Irish presidential candidate Catherine Connolly during Ireland's 2025 …
The fourth weekly Security Affairs AI-cybersecurity newsletter, by Pierluigi Paganini, is a curated list of headlines on the intersection of AI and security. It contains no original analysis or technical detail. Items include CyberXero, described as an AI-augmented initial access broker targeting Ukrainian critical infrastructure, and a C…