Widespread PHP Flaw May Cause Many Site Outages Today

KrebsOnSecurity reporting from September–October 2026 covers active exploitation of widespread PHP vulnerabilities, unusually large Microsoft security updates, ShinyHunters data theft and extortion investigations, arrests and alleged ties to ransomware negotiation firms, sanctions against cryptocurrency platform Cryptomus for facilitating illicit payments and Russian sanctions evasion, telecommunications data breaches, and privacy-related enforcement against data broker Radaris. The most urgent item is the reported actively exploited PHP flaw enabling full server compromise, while the broader”