Cybersecurity News
Filters
Filtered by category: Krebs On Security, tag: zero-day × Clear
Widespread PHP Flaw May Cause Many Site Outages Today
Matched: OpenAI
A critical pair of PHP vulnerabilities affecting roughly 70% of websites is being actively exploited, with working exploits already circulating. All PHP versions since 5.4 are affected, enabling remote code execution, denial-of-service, and data exposure. Fixes are available in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Cloudflare implemented firewall protections early today, while government sites in Europe have already gone offline. Researchers compare the severity to the 2021 Log4Shell flaw.
Microsoft Patches More Than 1,400 Security Flaws
Microsoft released patches for over 1,400 security vulnerabilities, surpassing September's record of nearly 1,000 fixes. One zero-day (CVE-2026-96951), a Windows Shell security bypass, is actively exploited. At least 78 flaws are rated critical. Microsoft attributes the high discovery volume to AI. Security teams face strain from testing large patch batches, and experts recommend prioritizing the 26 Microsoft flaws listed in CISA's Known Exploited Vulnerabilities catalog.