CVE-2026-109618 and CVE-2026-109619, rated 9.2 CVSS v4, affect unpatched PHP 8.2 through 8.5 and earlier branches. The fixes landed a day early after details leaked.
More than 1,000 internet-exposed GitLab servers remain unpatched against CVE-2026-97229, Shadowserver says, and 11,300 are vulnerable to a related code execution bug.
Revolut, Lloyds and HSBC customers reported problems with ATMs, transfers and online banking. Google expected full restoration around 1300 UTC.
The agency set a November 2 remediation deadline for CVE-2026-111357 and says the flaw can be chained with CVE-2026-104935 and CVE-2026-118527.
CVE-2026-111357 and CVE-2026-118527 can be chained with CVE-2026-104935, and CISA set due dates of Nov. 2 and Nov. 13.
Tax deadline for some filings moves from October 31 to November 16 as FOD Financiën investigates and restores MyMinfin, Tax-on-web and Biztax.
The October 23 restriction lasted about 73 minutes and applied to selected aircraft; scheduled airline flights were not affected, one record shows.
State says operators lost remote visibility and switched to manual controls, while residents kept receiving safe water. ABC News sources named Iran as the prime suspect.
Anthropic's IPO filing reveals a seven-to-ten-year AWS commitment, while Amazon's CEO says cloud capacity is largely committed through 2027.
CVE-2026-113380 scored 9.3 and affected RingRTC before 2.72.0; fix landed September 4 but public learned October 20.
Neoclouds are adding AMD options and software layers, but law firm Dentons warns that short GPU lifespans can leave custom AI data centers with stranded capital.
The deal adds about 25 megahertz of Globalstar mobile-satellite spectrum and two dozen satellites, and follows a grant of US market access for the C-3 system.