ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
2026-10-23T07:23:41Z•386af0d8dd6eb863b7b9abc4f13ee97c81cc4cc9eb3f534aded45813da55361e
CVE-2026-109618CVE-2026-109619AI securityDWGPHPPanchanVBAYARAcritical vulnerabilitycryptominingearly proof of conceptexploitation riskremote code execution
What happened
SANS Internet Storm Center reporting highlights a critical PHP vulnerability pair (CVE-2026-109618 and CVE-2026-109619) with CVSS 9.4, widespread deployment, and early proof-of-concept exploits available before patch release. The feed also includes reporting on malicious mining activity, VBA projects embedded in DWG files, and AI security, but the PHP issue is the primary security concern.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 386af0d8dd6eb863b7b9abc4f13ee97c81cc4cc9eb3f534aded45813da55361e
- Enrichment time
- 2026-10-23T07:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.