PHP2Shell: Why websites are going offline for emergency security updates
Websites are temporarily going offline as admins address two critical PHP flaws that could let attackers run malicious code on their servers.
Search Intelligence
Your AI agent fixed the bug, but what else did it change?
Today we’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents. Our patching-bugs plugin reproduces reported bugs,
Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities
The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw. The post Prepare yourselves: PHP to release emergency fixes for 2
Workshop on Economics and Information Security (WEIS) Archive
There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay on the e
Operation FlashHole: Lazarus breaks security, defies control
Kaspersky researchers analyze Operation FlashHole – a recent complex attack by Lazarus, involving a sophisticated malware set, watering-hole technique and abuse of CrossWeb EX financial security softw
ISC Stormcast For Wednesday, October 21st, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
PSA: Upcoming Critical PHP Security Release
The PHP security team has issued advance notice of an upcoming critical security release, scheduled for Wednesday, October 21, 2026 at 14:00 UTC (10:00 AM Eastern). The release fixes two critical vuln
ISC Stormcast For Tuesday, October 20th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
PSA: UpdraftCentral Connection Key Compromise Used to Install Malicious Plugins on WordPress Sites
TeamUpdraft has disclosed unauthorized access to its teamupdraft.com website over the weekend of October 17-18, 2026. The company believes its customer database was accessed and says that database con
A week in security (October 12 – October 18)
A list of topics we covered in the week of October 12 to October 18 of 2026
Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the security stories in th
Eiliko robot companion exposes private chats and can be hijacked
A researcher found serious flaws in Eiliko’s security, exposing private conversations and allowing remote changes to what the robot says.
OpenAI sued over children safety and data use
Eight US states and a mother of two accuse the ChatGPT maker of putting children’s safety and privacy at risk.
ISC Stormcast For Friday, October 16th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Small Agents, Smaller Blast Radius: Controlling What AI Can Do
I believe the cybersecurity industry may be approaching AI security the wrong way. 
Update Chrome: Google fixes 37 security flaws, including seven critical bugs
Some flaws could let attackers run malicious code on your device through a crafted webpage.
ISC Stormcast For Thursday, October 15th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
![Panchan's Mining Island [Guest Diary]](https://isc.sans.edu/diaryimages/images/Zachary_Norwood_pic1.png)
Panchan's Mining Island [Guest Diary]
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program] 
Penetration testing every deployment with AWS Continuum
Most security tooling that fits into a CI/CD pipeline—static analysis (SAST), software composition analysis (SCA), and dynamic scanners (DAST)—flags potential issues from patterns and signatures. A fl
Cyberattack on Connected Fridges in France
Another IoT cyberattack , this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according