PHP2Shell (CVE-2026-109618 and CVE-2026-109619) critical PHP vulnerabilities: What UK organisations need to know
Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, allow remote code execution without a login. See affected versions, fixes and what to do now.
Supplier attacks, a record 966 Microsoft patches and a WordPress flaw exploited in under five hours: the September 2026 cyber news UK organisations need.
Public sector breaches exposed 700,000+ records, a UK power generator was taken offline, and VMware was exploited within days of patching. August’s full briefing.