PHP2Shell: Two Critical PHP Flaws, and the Controls That Decide Whether You’re Exposed
On October 21, 2026, PHP shipped emergency fixes for two critical, unauthenticated remote code execution flaws. Here’s what’s affected, what to do this week, and how the response maps to NIST, ISO 27001, CSA CCM, FFIEC, and SOX controls.
4 AI Monsters Hiding in Small Businesses (and the Free Fix for Each)
AI isn’t the scary part. The scary part is what sneaks in around it. Here are four AI monsters hiding in small businesses right now, and the free fix for each one.