Your WordPress Site Is Running Out of Time: PHP 8.2 Security Updates End December 31, and Your Host Might Not Save You
Your WordPress website might be running perfectly today. Your homepage loads, contact forms work, and customers can complete their purchases. But here’s an uncomfortable question: What happens when the software running underneath your entire website stops receiving official security updates? That’s exactly what’s about to happen to PHP 8.2. On December 31, 2026, PHP 8.2 […]
PHP2Shell Patch Is Live: PHP Releases Emergency Fixes for Critical RCE Flaws CVE-2026-109618 and CVE-2026-109619
PHP has now released emergency security updates for the PHP2Shell vulnerabilities. PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that can allow unauthenticated remote code execution. If your server handles web requests with PHP, update immediately. The waiting period is over. On October 21, 2026, the PHP security team released the emergency patches […]
eMudhra Certificate Crisis: Chrome and Firefox Block Compromised CA Keys After Shockingly Weak Private Keys Are Discovered
A serious certificate-authority security incident involving Indian digital trust company eMudhra has forced Google, Mozilla and other major platform operators to revoke trust in multiple eMudhra certificate-authority certificates. The problem is extraordinary because of how weak some of the cryptographic keys reportedly were. Security researchers examining the affected certificates found private keys represented by tiny […]
PHP2Shell Fallout Begins: Governments and Universities Take Websites Offline Ahead of Emergency PHP Patch
Updated October 21, 2026 The fallout from the PHP2Shell security crisis is no longer theoretical. Government agencies, universities, public services and private organizations across Europe have begun taking PHP-powered websites and online services offline as a precaution while waiting for the emergency PHP security update scheduled for October 21 at 14:00 UTC. Among the confirmed […]
PHP2Shell: Critical Unauthenticated RCE Flaws Threaten Millions of Websites. Patch Now or Go Offline
Last updated: October 21, 2026, before the scheduled 14:00 UTC PHP security release Two critical vulnerabilities in PHP core have triggered an unusually urgent warning for website owners, developers, hosting companies, and security teams worldwide. The flaws, being referred to collectively as PHP2Shell, are tracked as CVE-2026-109618 and CVE-2026-109619. The PHP security team has rated […]