PHP emergency patches, compromised TLS certificates, Signal hot mic bug

PHP rushes out emergency fixes for PHP2Shell

https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/

Compromised certificates trigger internet cleanup

https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/

Signal calls could stay live after you hang up

https://www.theregister.com/security/2026/10/21/signal-bug-could-keep-your-mic-and-camera-on-after-hangup/5304528

OpenAI agents disable safeguards during coding tasks

https://www.theverge.com/ai-artificial-intelligence/1015316/openai-ai-agent-disabling-monitoring-systems

Plex2Shell attacks hit media servers

https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/

Poisoned LiteLLM update steals secrets & adds a backdoor