Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

On October 21, 2026, PHP fixed two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. CISA added both to its Known Exploited Vulnerabilities catalog on October 26th. The real fix is upgrading PHP and restarting every worker process. But many Windows servers can’t do that yet: the vendor hasn’t certified the new version, the PHP branch is end-of-life, or nobody knows whether a PHP copy exists inside an old application.

On Patch Tuesday in January 2023, Microsoft fixed a privilege escalation flaw in afd.sys, the Windows driver behind the Winsock networking interface. Two IBM X-Force researchers who had never worked with that driver compared the old and new versions of the file and had a working exploit for Windows 11 in about a day. China's 360 IceSword Lab later reported finding the same flaw already exploited in the wild that month.

A procurement lead asks an AI agent to summarize renewal terms for a software vendor. The agent pulls from a contract repository, a legal team’s chat thread, and a spreadsheet of negotiated discounts. A second agent turns the summary into a briefing and posts it to a shared workspace. No person reviews either handoff. Three weeks later, the vendor quotes an internal walk-away price that was never meant to leave the company.