This posting is here to collect cyber security news in October 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
This posting is here to collect cyber security news in October 2026.
I post links to security vulnerability news to comments of this article.
You are also free to post related links to comments.
255 Comments
Tomi Engdahl says:
Starlinkin häiriö paljasti Ukrainan riippuvuuden Elon Muskin satelliittiyhteyksistä – tästä on kyse
Ukrainan ja Yhdysvaltojen välit ovat kiristyneet. Maiden välejä kiristää esimerkiksi satelliittiyhteyksien häiriö, joka vaikeutti droonioperaatioita rintamalla.
https://yle.fi/a/74-20251694
Tomi Engdahl says:
https://thehackernews.com/2026/09/public-exploits-released-for-four-linux.html?m=1
Tomi Engdahl says:
Kriittinen haavoittuvuus ilmi, verkkopalveluja ajetaan alas Suomessa – häiriöitä maailmanlaajuisesti
https://www.mtvuutiset.fi/artikkeli/valtionhallinnon-verkkopalveluja-ajetaan-alas-varotoimenpiteena/9409874
Tomi Engdahl says:
PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
https://techcrunch.com/2026/10/21/php-armageddon-openai-googles-wiz-find-ancient-holes-panicking-the-internet/?utm_source=dlvr.it&utm_medium=facebook&fbclid=IwdGRjcAVF6ZVleHRuA2FlbQIxMQBwZG9mBXNydGMGYXBwX2lkDDM1MDY4NTUzMTcyOAABHmPvdFTUJU0mFktpyPFYRAPMlgl4QQ1SDyR6qvAiBATv14r_IXGTk34I-XSt_aem_4D5vXkv3wnepqUrGke37KQ
The U.S. National Security Agency’s sent out an alarming warning on Wednesday that two critical holes had been found in PHP, with patches already issued by the PHP Foundation.
PHP is a server-side programming language so widely used for web applications that it powers roughly 70% of the websites on the internet; by some accounts, that’s more than 33 million sites. It is also used by popular content management systems like WordPress.
The NSA warned that these holes are so severe that if a website can’t be patched immediately, it should be pulled off the web until it can be. The holes allow attackers to infiltrate the server’s file system or a database that may be used by the web app.
Interestingly, these holes have been tucked away in all versions of PHP since version 5, which was released in 2004. Websites not running relatively current versions of PHP will have some updating work to do, as PHP 8.1 and older versions are no longer supported. The recommendation is to update the web server to the current version of PHP, which is 8.5.12.
So how did two such ubiquitous, decades-old flaws that affect nearly every website on the internet suddenly come to light? AI, naturally, particularly via OpenAI and Google’s Wiz.
Security testing company Calif was engaged in OpenAI’s “Patch the Planet” initiative to find flaws in open-source source software. Using GPT‑5.6 Sol, it found one of the flaws, OpenAI disclosed in a blog post. Separately, the Wiz team also used AI, namely its Wiz Atlas security AI agent, Gemini 4 Argon, and GPT-5.6 Sol to find multiple vulnerabilities in PHP.
Tomi Engdahl says:
Kyberturvallisuuskeskuksen apulaisylijohtajan Pekka Jokisen mukaan PHP-haavoittuvuuden kaltaisia ongelmia nähdään jatkossa. Fataaleja hyökkäyksiä voi olla vielä edessä, hän arvioi.
https://www.kauppalehti.fi/uutiset/a/3d737f16-7fa8-480e-83a4-af5c5739808e?utm_term=Autofeed&utm_medium=Social&utm_source=Facebook#Echobox=1792686162