General-purpose scripting language for web development
Security researchers have found two critical vulnerabilities in the PHP programming language, labelled PHP2Shell, and PHP maintainers have released emergency patches. Governments and major tech firms have urged operators to update immediately or temporarily take sites offline after AI-assisted research and an early public leak triggered millions of exploitation attempts between 21–27 October 2026.
Retailers are embracing AI agents to shop on customers’ behalf while clashing with platforms that restrict or block agent use. Walmart leads with agent gateways and profiles; Amazon blocks Muse on its site, pushing a broader debate about security, privacy, and consumer choice. Home Depot and Target are testing openness and in-house AI, signaling a fragmented landscape for AI-assisted shopping.
Vulnerabilities in PHP, a core technology powering about 70% of websites, have prompted governments and major sites to take systems offline to patch critical flaws. OpenAI researchers credit frontier AI with help in discovering the bugs, and cybersecurity teams warn that exploitation could allow data theft and server takeover. Patches have been issued, and authorities urge immediate updating.
Quest Diagnostics has disclosed unauthorized access to its Quanum Lab Services Manager, a platform used by clinicians to order tests and view results. The breach, discovered this week, may involve patient records and personal information and is under investigation. Law enforcement has been notified. Previous Quest breaches and rising cyberattacks in health tech frame the context as investigators pursue specifics.
The FBI has warned that PHP vulnerabilities allow remote code execution, prompting government and other sites to go offline for security patches. The PHP Foundation has released fixes, with OpenAI leading a coalition to coordinate protections amid disclosures.
Advanced AI models and open-source hacking tools have exposed and helped exploit long-hidden software vulnerabilities. Firms have linked autonomous tools like Artex to active attacks, while frontier models have found thousands of bugs in PHP and other critical codebases. Organisations are patching systems and warning that AI will accelerate both discovery and malicious reuse of flaws.
Binance has replenished the majority of stolen assets from a historic cyberattack. The company will cover the remaining losses with a combination of internal funds and insurance. Authorities are tracing funds as withdrawals resume in phases to restore user access.
Japan has unveiled a 2026 package to strengthen cyber defences, using AI to identify vulnerabilities, expand expert-response teams, and fund victim support. The move follows a string of high-profile hacks and aims to raise cyber resilience to the world’s top standards.