🏆 New Achievement! Embargo This, Actually!
Your Q4 infrastructure review is in, and the numbers look great — uptime solid, tickets closed, coffee budget approved. One small note in the "Areas for Improvement" column: somebody leaked two critical PHP 8 zero-days rated CVSS 9.2 a full day before the embargo lifted, forcing the PHP security team to rush an emergency release to October 21 at 14:00 UTC. CVE-2026-109618 and CVE-2026-109619 are remote code execution flaws in PHP core. (1/2)
watchTowr confirmed no exploitation in the wild yet and no workaround exists — patching is your only option. Apply the PHP security release immediately; Thursday's timeline is no longer the plan.
Reward: You've received a Rushed Release Medal — it pairs beautifully with your Unplanned Overtime Trophy.
BleepingComputerPHP warns admins of two critical flaws, emergency patches coming tomorrowThe PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure.
