Warning Against Vulnerabilities Exploited in Actual Attacks (PHP)
The US Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The affected product is PHP. CVE-2026-109618 is a memory corruption vulnerability that occurs under memory-starved conditions. CVE-2026-109619 is a vulnerability involving a reference to an outdated internal request state. CISA has
The Weak Link Identified by AI: October 2026, When the Outer Contact Point Collapsed
Security Blind Spots Identified by AI The large-scale data breaches disclosed in quick succession in South Korea and Japan in October 2026 mostly originated not from internal core systems, but from peripheral entry points such as externally exposed web services, app backend APIs, and outsourced SaaS (services provided by third-party
Reproducing the PHP2Shell Vulnerability and Detection Using AhnLab EDR/XDR
On October 22, 2026, the PHP Security Team announced in an advisory that it would release security updates addressing the vulnerabilities CVE-2026-109618 and CVE-2026-109619. Although the causes of the two vulnerabilities differ, they are both remote code execution vulnerabilities that allow an unauthenticated threat actor to execute arbitrary code remotely.
