Cyber Incidents USA 2026-27

[sharon sanders]

AI Just Found a Bug That Puts up to 70% of the World’s Websites at Risk​

Updated Oct. 21, 2026 at 6:05 pm ET
First, artificial intelligence heralded the Bugmageddon. Now it is triggering an all-hands-on-deck cyber emergency.
The creators of PHP, a technology that powers as much as 70% of the world’s websites, disclosed a critical security issue Wednesday that could be leveraged by hackers to take control of any system running its software. That would allow an attacker to steal information or launch a cyberattack on anyone visiting a hacked website.

Copyright

https://www.wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websites-at-risk-fd0902ea

FluTrackers installed the fix yesterday as soon as we were notified. Hat tip again to linuxkidd.

 

[Commonground]

Alert Number: I-102326-PSA | 23 October 2026

Critical Vulnerability Alert: PHP Core​

---

In a follow on to the FBI's initial social media posting on October 21st regarding the identified PHP vulnerabilities, the FBI is sharing this PSA to continue to warn the public of the criticality and necessity to take steps to protect any affected networks from these known vulnerabilities. PHP is a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.

Attackers could exploit these vulnerabilities to break into systems, putting sensitive information and business operations at risk. Security updates are available and should be applied immediately. If you are a business owner or website operator, check whether your systems are affected.

The FBI urges organizations to take the following steps now:

• If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
• Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
• Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.

The FBI urges organizations to take the following steps now:

• If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
• Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
• Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.

Report It​

If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or www.ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims.

For the latest information, follow PHP's announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA's Known Exploited Vulnerabilities catalog. In addition, CISA released the following guidance, which can be found here. https://www.cisa.gov/news-events/al...ulnerabilities-php-require-immediate-patching

Internet Crime Complaint Center (IC3) | Critical Vulnerability Alert: PHP Core

 

[sharon sanders]

Sam Altman, Co-Founder and CEO of OpenAI: Staying Human While Scaling Superintelligence

zhttps://www.youtube.com/watch?v=anAmTGcewX8&t=1326s

 

[Commonground]

CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security​

CISA 2030: Defend, Harden, Prevail
Released
October 26, 2026
[emphasis is mine]

WASHINGTON – The Cybersecurity and Infrastructure Security Agency (CISA) today released its new strategy, CISA 2030: Defend, Harden, Prevail, which advances President Trump’s Cyber Strategy for America and National Resilience Strategy while strengthening the security and resilience of the nation’s critical infrastructure.

The strategy addresses an increasingly complex threat environment, strengthens national cyber defense, and prioritizes the infrastructure most essential to America’s national security, economy, public health, and safety.

The threat landscape is evolving at an unprecedented pace. Nation-state actors and other malicious adversaries are becoming increasingly sophisticated in their attempts to compromise U.S. networks. CISA is strengthening national cyber defense through decisive, proactive action to identify, disrupt, and eliminate adversarial access while hardening critical infrastructure against emerging threats.

“I call on every company and organization in the critical infrastructure community—from owners and operators to vendors and technology manufacturers—to act now,” said CISA Acting Director Nick Andersen. “CISA 2030 provides a focused roadmap to strengthen defenses, eliminate adversarial footholds, and deny them any advantage that could endanger the nation’s security, economy, or public health.”

CISA 2030 is guided by three pillars:

• Defend: Lead National Cyber Defense;
• Harden: Prioritize National Infrastructure Security, and
• Prevail: Mobilize National Resilience. Under the strategy, CISA will strengthen security across the interconnected physical and cyber dimensions of critical infrastructure.

The strategy also reaffirms CISA’s role, as delegated by the Department of Homeland Security, in leading the initiation and restoration of National Security and Emergency Preparedness communications, which are essential to maintaining continuity of government and public safety during crises.

The strategy recognizes that cyber, physical, and geopolitical threats increasingly intersect and can disrupt essential services Americans rely on every day. CISA will work with public- and private-sector partners to strengthen the security and resilience of operational technology, advance software security, support secure emerging technologies, and improve continuity of National Security and Emergency Preparedness communications.

In alignment with Cyber Strategy for America, CISA will move from a passive defense posture toward an aggressive, anticipatory stance focused on identifying, mitigating, and reducing malicious access to critical infrastructure. The agency will also improve its ability to prioritize risk, mobilize partners, and support rapid, coordinated action when threats emerge.

The strategy sets out CISA’s priorities for the coming year:

• Within 60 days, CISA will begin reviewing its core services and capabilities to meet key objectives.
• Within 180 days, CISA will provide a plan to implement the strategy and measure its results.
• Within 365 days, CISA will report on its progress in carrying out the strategy.

CISA 2030: Defend, Harden, Prevail delivers a clear, decisive roadmap for advancing the agency’s mission and strengthening the security and resilience of the nation’s critical infrastructure in service to the American people.

CISA Unveils New Strategy to Strengthen National Cyber Defense and Critical Infrastructure Security | CISA

www.cisa.gov