Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 23)

Unit 42 threat intelligence covering critical PHP vulnerabilities, compromised eMudhra certificate authority keys, OAuth attacks, AI-assisted cybercrime and espionage, active exploitation of PAN-OS and NetScaler vulnerabilities, FortiGate compromise involving the PEERSTITCH implant, phishing and credential abuse, cloud and Kubernetes supply-chain risks, and Iran-linked targeting of critical infrastructure. Multiple reports describe active exploitation or compromise of internet-facing security infrastructure and high-impact enterprise attack vectors.