AI Security
Banking
Banks are shutting out AI agents that log in with customers' passwords
Major US banks have found AI agents logging in with customers' passwords and are blocking them. In Australia, sharing a passcode can cost you a refund.
Cybersecurity
Anthropic security executive warns AI-found software flaws will get worse for 18 months
On 22 October 2026, Jason Clinton, security chief at Anthropic, posted a blunt warning: "as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now.
Cybersecurity
Hundreds of thousands of servers run PHP versions that will never get the PHP2Shell fix
Small businesses, local councils, sports clubs and community charities running cheap shared hosting carry the heaviest exposure from two critical PHP vulnerabilities disclosed on 21 October 2026.
Cybersecurity
Patching your web server won't stop PHP2Shell in your firewall
PHP2Shell reaches well past web servers. The two critical remote code execution vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, live inside any PHP-enabled interface, including the management consoles of enterprise firewalls, NAS storage devices and network appliances that embed
Opinion
AI found PHP's worst flaw in years, and attackers have the same tools
The researchers say AI turned these PHP flaws into working exploits in hours. Any business left unpatched this week should act as if someone got in.
Cybersecurity
Governments pull websites offline as hackers target critical PHP flaws
Attackers are already trying to take over websites through two critical PHP flaws. WordPress updates won't protect you; your host has to act, today.