PHP vulnerabilities update, ConnectWise AI spies, Africa cybercrime takedown

Railway says intruder may have accessed customer secrets

https://thehackernews.com/2026/10/railway-says-intruder-may-have-accessed.html

Law enforcement disrupts nearly 11,000 cybercrime networks in Africa

https://www.bleepingcomputer.com/news/security/authorities-disrupt-nearly-11-000-cybercrime-networks-in-africa/

ConnectWise breach let Chinese AI spies move in on cloud tenants

https://www.theregister.com/security/2026/10/22/microsoft-says-connectwise-breach-let-chinese-spies-loose-on-2250-cloud-tenants/5304687

GitLab warns of new maximum severity code execution vulnerability

https://www.bleepingcomputer.com/news/security/gitlab-warns-of-new-max-severity-code-execution-vulnerability/

Hundreds of websites taken offline due to PHP vulnerabilities (continuing coverage)

https://therecord.media/php-script-vulnerabilities-warnings

https://www.bleepingcomputer.com/news/security/amazon-says-php2shell-exploitation-began-4-days-before-patches/

Splunk, SolarWinds release fresh security updates