Global cryptocurrency giant
@binance has confirmed it suffered the largest cyber-attack in history, resulting in $6.3bn of cryptocurrency being stolen.
https://www.infosecurity-magazine.com/news/binance-record-hack-crypto-heist/
Infosecurity MagazineBinance Hit by Record-Breaking $6.3bn Hack in Largest Crypto HeistLeading cryptocurrency analysts have attributed the cyber-attack to a North Korean elite hacking unit
ISC2 is taking a more active role in shaping the future of the profession with the launch of its Cyber-AI Workforce Coalition.
It will produce toolkits to help employers describe new job roles at the intersection of AI and cybersecurity.
https://www.infosecurity-magazine.com/news/isc2-launches-cyberai-workforce/
Infosecurity MagazineISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AIISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity
Cybersecurity professionals will be able to take the first ISC2-approved AI security exam in early 2027.
https://www.infosecurity-magazine.com/news/first-isc2-ai-security/
Infosecurity MagazineFirst ISC2 AI Security Certification Expected for Early 2027ISC2 is seeking 3000 volunteers to enrol to a pilot exam phase for its upcoming AI security certification
The PHP Foundation has blamed Chainguard for breaking the embargo before patches for the PHP2Shell vulnerabilities were ready to be shipped.
PHP blog post: https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
Chainguard response: https://lnkd.in/p/eQnxwTqw
thephp.foundationToday's PHP Security Release, and How We're Strengthening PHP SecurityDescribing the story behind how critical security vulnerabilities were found and fixed.
Someone tried to exploit the critical PHP2Shell vulnerabilities four days before the vulnerabilities were published, according to Amazon.
Other security firms have also observed evidence of exploitation attempts in the wild for both vulnerabilities.
https://www.infosecurity-magazine.com/news/php2shell-exploitation-attempt/
Infosecurity MagazinePHP2Shell Exploitation Attempt Detected Four Days Before DisclosureThreat intelligence analysts now observe large-scale evidence of exploitation of the two critical PHP vulnerabilities
🚨 Why was a good part of the web down on 21 October?
The answer: PHP2Shell. Two critical PHP vulnerabilities, rated 9.2/10, triggered a wave of precautionary website shutdowns ahead of the release of security patches.
PHP has now published its full security advisory, with patches for CVE-2026-109618 and CVE-2026-109619 as well as mitigation measures to take in order to mitigate the risks.
www.php.netPHPPHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
🚨 Two PHP vulnerabilities that could affect the servers underlying many websites have been disclosed ahead of the planned security patches, leading major cybersecurity authorities to urge users to prepare for remediation.
https://www.infosecurity-magazine.com/news/critical-php-vulnerabilities-leaked/
Infosecurity MagazineCritical PHP Vulnerabilities Leaked Ahead of Scheduled Security PatchTwo critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches
