runZero, a Dragos company, provides a single source of truth for exposure management in the AI-attack era across your total attack surface: internal, external, IT, OT, IoT, mobile, and cloud. Try it free today!
Open remote profile ↗Register for runZero Hour here: https://www.runzero.com/research/runzero-hour/
runZerorunZero Hour – Subscribe to the seriesDeep dive web series into all things exposure, from new threats and risky devices to vulnerabilities hiding in IT, OT, IoT, remote, cloud, and mobile…
The PHP foundation announced there will be a security release tomorrow (Oct 21) addressing two critical PHP vulnerabilities that could lead to remote code execution. We'll all be racing against an exploit storm. Keep a close eye on your PHP-based frameworks.
To find your PHP instances using runZero, check out: https://www.runzero.com/blog/php/
And for the latest developments, tune into runZero Hour with our research team tomorrow at 1pm ET (link in 🧵).
runZeroCritical RCE vulnerability in PHP: Find impacted assetsPHP has announced a security release scheduled for October 21, 2026 that addresses two critical vulnerabilities, both rated CVSS v4.0 9.2.
⏰ Tomorrow at 1PM ET/ 10AM PT: The Research Cinematic Universe crossover!
runZero Hour hosts Tod Beardsley and Brianna Cluck are uniting with Reid Wightman, Peter Eacmen, and Cale Black to discuss the future of OT, IT, and firmware security.
Discussion topics:
✔️ Potential threat research roadmap
✔️ Top bugs this month
✔️ Lights Out disclosure update
👉 Register here for live Zoom chat: https://www.runzero.com/research/runzero-hour/
runZerorunZero Hour – Subscribe to the seriesDeep dive web series into all things exposure, from new threats and risky devices to vulnerabilities hiding in IT, OT, IoT, remote, cloud, and mobile…