Two PHP runtime flaws can allow remote code execution without authentication. Check every web-serving PHP installation and apply a fixed release or a vendor backport.
A security briefing for the week of 24 September 2026, updated with Citrix's 27 September NetScaler advisory. Three separate issues call for different responses.
A June 2026 campaign compromised 78 accounts across 64 organizations. The lesson is to verify authentication policy coverage, not simply whether MFA is enabled.
We use essential cookies for security. With your permission, we can remember your language and, when enabled, measure website use with Google Analytics. Privacy policy ↗
Your browser could not save this choice. Optional cookies remain off. You can continue browsing.