Executive Summary Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619.
At the time of publication, Palo Alto Networks Cortex Xpanse has identified the presence of over 22.6 million exposed instances potentially vulnerable to CVE-2026-109618 and CVE-2026-109619 based on our telemetry.
Vulnerabilities Discussed CVE-2026-109618, CVE-2026-109619 Palo Alto Networks Product Protections for CVE-2026-109618 and CVE-2026-109619 Palo Alto Networks customers can leverage several product protections and updates to identify and defend against these vulnerabilities.
Cortex Cloud and Prisma Cloud Cortex Cloud and Prisma Cloud help detect vulnerable PHP versions in code and cloud environments providing both posture and vulnerability protections.
Additional Resources Impact of Critical Vulnerabilities in PHP on Palo Alto Networks Products — Advisory, Palo Alto Networks Millions of PHP Instances Exposed: What Organizations Need To Do Right Now — Lee Klarich, Palo Alto Networks Security advisory: Critical remote code execution vulnerabilities, update now - PHP Updated October 21, 2026, at 9:30 a.m. PT to add Palo Alto Networks security advisory, update links in additional resources, and update product protection section.
Oct 21, 2026 · via unit42.paloaltonetworks.com
As militaries and commercial operators deploy more unmanned systems, the technologies that keep drones and robots connected, secure and operational are becoming critical.
The company primarily serves original equipment manufacturers (OEMs) developing unmanned platforms for applications where reliable communications and system resilience are essential.
The announcement matters because the drone and robotics market is growing rapidly, and with that growth comes increased risk.
Defense organizations and commercial operators are expanding their use of unmanned systems for surveillance, logistics, inspection and other tasks.
Mobilicom’s focus on cybersecure communications addresses a gap in the market, where off-the-shelf solutions may not provide the necessary protection.
Oct 21, 2026 · via citybuzz.co
In 2026, more than 82% of households around the globe are smart homes in some capacity.
It might be Reddit user DonDrapeur, whose house in Belgium uses 420 smart home devices and counting.
Every aspect of home management, entertainment, and energy consumption can be controlled and automated when you have more than 400 smart home devices running the show.
Despite the appeal, it's important to know which smart devices you should think twice before buying.
Even if you only own a handful of IoT devices, you need to know how to protect your smart home from hackers.
Oct 20, 2026 · via bgr.com
Economic uncertainty is forcing small and midsized businesses to reconsider cybersecurity spending, creating a challenge for MSPs tasked with protecting customers on tighter budgets.
In a ChannelPro article, Michael Gray, chief technology officer at Thrive, warns that cutting security investments can expose businesses to ransomware, data breaches and costly operational disruptions.
Gray advises MSPs to focus on affordable, high-impact controls, including multifactor authentication, regular patching, endpoint protection and employee security awareness training.
Helping customers prioritize cybersecurity investments, demonstrate measurable risk reduction and build operational resilience can strengthen their position as trusted business advisors.
Providers can package security assessments, employee training, vulnerability management, backup validation and ongoing security monitoring into affordable, recurring services.
Oct 20, 2026 · via channele2e.com
The Property Insurance Trap Nobody Reads Until It’s Too Late If cyber insurance will not pay for spoiled stock, the obvious next question is whether a standard property policy will.
A retailer can own a cyber policy and a property policy and still find itself without coverage for the exact scenario that just emptied its freezers.
Cyber Insurance vs Property Insurance vs Specialist Cover The clearest way to see the cyber insurance physical damage exclusion problem is side by side.
First, confirm in writing whether the cyber policy excludes physical damage and spoilage, and whether the property policy excludes cyber-triggered losses.
Why doesn’t a standard property policy cover it either?
Oct 20, 2026 · via shattered.io
Live Update At 09:18:26 EDT: On Tuesday, October 20, 2026 WISeSat.Space Holdings Corp. stock [NASDAQ: SAIQ] is trending up by 36.36%!
Similar behavior appears on 2026/10/08 and 2026/10/09, where WISeSat.Space swung multiple dollars intraday.
Intraday 5‑minute data shows heavy premarket action, with SAIQ trading between roughly $5.60 and $6.70 around 04:00–04:10 before easing into the low $5s.
Why Traders Are Watching SAIQ SAIQ grabbed traders’ attention the second WISeSat.Space completed its business combination with Columbus Acquisition Corp and started trading on Nasdaq as a standalone name.
For short‑term traders, WISeSat.Space is all about timing.
Oct 20, 2026 · via timothysykes.com
Expanding Visibility and Deployment Flexibility The expanded partnership introduces a direct integration between the Nozomi platform and SEL OT Software-Defined Networking (OT SDN).
About Nozomi Networks Nozomi Networks protects the world's critical infrastructure from cyber threats.
Customers rely on Nozomi Networks to minimize risk and complexity while maximizing operational resilience.
Learn more about Nozomi Networks.
SOURCE Nozomi Networks
Oct 20, 2026 · via prnewswire.com
Cybersecurity stocks are shares of publicly traded companies that develop products or provide services designed to protect computer systems, networks, data, and digital infrastructure from cyber threats.
These companies had the highest dollar trading volume of any Cybersecurity stocks within the last several days.
Palo Alto Networks (PANW) Palo Alto Networks, Inc. provides cybersecurity solutions worldwide.
Q3 Earnings Could Blow Past Consensus—Be Ready for What Comes Next Read Our Latest Research Report on PANW CrowdStrike (CRWD) CrowdStrike Holdings, Inc. provides cybersecurity solutions in the United States and internationally.
Read Our Latest Research Report on GLOB Rapid7 (RPD) Rapid7, Inc. provides cybersecurity solutions under the Rapid7, Nexpose, and Metasploit brand names.
Oct 20, 2026 · via marketbeat.com
Unlike conventional viruses, an AI worm is capable of independently studying unfamiliar devices, adapting to a new operating system, and deploying necessary programs without human intervention.
During propagation, AI models undergo a form of evolution.
How does an AI worm differ from conventional viruses?
An AI worm is not tied to specific code and can independently select the required software versions for completely different hardware—from Jetson Nano microcomputers to Mac-based PCs.
The transfer of many gigabytes of AI model weights between household devices creates atypical load on communication channels.
Oct 19, 2026 · via newsukraine.rbc.ua
One of the longstanding criticisms of “Internet of Things” (IoT) devices, such as household appliances and lights connected to the internet, is that the market has been lax about cybersecurity.
At least for the expected target capability of 4 GB of RAM, the AI models did not yet pass this test.
As the numbers indicate, the AI models would be slow replicators even when they enter this capability window.
Small non-connected AI models could become a big headache As the research stresses, the unique problem of the theoretical small self-replicating AI models is that there is no central point from which to turn them off.
The researchers also warn that this is not a case of one of these AI models needing to fit onto one device.
Oct 19, 2026 · via cpomagazine.com
“The BNC produces and transmits bankruptcy notices for all federal bankruptcy courts around the country, and BAE Systems operates BNC systems and websites on behalf of the Federal Judiciary.”
“The incident has also halted the BNC’s production and distribution of bankruptcy notices for bankruptcy courts.”
There is no official confirmation, or clarification, on the company’s website for now, but in a statement given to BleepingComputer, BAE Systems said it was investigating the matter.
BAE Systems is one of the largest defense, aerospace, and security companies in the world.
Among other things, BAE Systems works on the Eurofighter Typhoon aircraft, different armored combat vehicles, naval ships, radars and sensors, and different intelligence analysis and digital security services.
Oct 19, 2026 · via techradar.com
ETTelecom Desk ETTelecom Updated On Oct 19, 2026 at 05:18 PM IST
Oct 19, 2026 · via telecom.economictimes.indiatimes.com
A new global survey by Kaspersky draws attention to the key security gaps of companies below 500 employees and highlights critical risk areas.
Global Kaspersky B2B Market Pulse survey: What was the result of the most harmful incident your organization experienced over the past 12 months?
“Cyber incidents often inflict far more devastating consequences on small and medium-sized companies than high-profile breaches do on large corporations.
“Our findings highlight the increasingly complex and diverse range of cyberthreats facing businesses across APAC, underscoring the importance of cyber resilience.
Security Modules include Security Awareness, Email Security, Workload Security, Threat Lookup & Analysis and Vulnerability Management, allowing businesses to strengthen specific areas without redesigning their existing security stack.
Oct 19, 2026 · via itvoice.in
Investigation priorities: Mule Accounts → RTGS Transfers → Cash Deposits → Forex Conversion → Beneficial Ownership → Proceeds of Crime.
Investigation priorities: Bank Accounts → Cash-Deposit Machine Records → CCTV → Cryptocurrency Transactions → Wallet Attribution → Beneficial Ownership.
BFSI priorities: Investment Fraud Detection → Mule-Account Monitoring → Transaction Velocity Analysis → Social-Media Intelligence → Rapid Fund Freezing.
Defence priorities: Counter-UAS Surveillance → Radar Integration → RF Intelligence → Drone Identification → Electronic Warfare → Layered Air Defence.
Strategic implication: India should strengthen AI security testing, counter-drone readiness, cyber crisis simulations and cross-sector technology governance.
Oct 19, 2026 · via the420.in
A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication.
The bug allows an attacker to get unauthenticated remote code execution on affected routers without knowing the WiFi password or going through the normal WPS setup process.
An attacker within Wi-Fi range can exploit the flaw without knowing the Wi-Fi password, completing the setup process, or requiring any action from the user.
In his demonstration, Kaiser extracted the Wi-Fi password from the router’s memory and sent it over the wireless connection.
The code retrieves the Wi-Fi password (PSK) from the router’s NVRAM and sends it back to the attacker over Wi-Fi.
Oct 19, 2026 · via securityaffairs.com
An analysis of 8,257 incidents shows how phishing, vulnerability exploitation, and AI are reshaping the cyberthreat landscape.
DDoS attacks appeared in 51% of incidents analyzed, while 40% resulted in unauthorized access.
Among unauthorized access incidents, 60% involved vulnerability exploitation.
What does the ENISA Threat Landscape 2026 reveal?
Among those unauthorized access incidents, 60% involved exploitation of vulnerabilities in internet-facing infrastructure, edge devices, cloud and identity systems, legacy Internet of Things (IoT) platforms, developer tools, or third-party platforms.
Oct 19, 2026 · via blog.barracuda.com
Modern intrusion detection systems face a paradox that has shaped the field for years.
This architecture is aimed squarely at the environments where intrusion detection is hardest: cyber-physical systems, Internet of Medical Things deployments, unmanned aerial vehicles, and distributed IoT networks where no single site sees the full picture.
Benchmarks against competing approaches were run under matched preprocessing conditions and identical class distributions, a detail that matters because unfair comparisons are endemic in the intrusion detection literature.
Subject of Research: A causality-driven hybrid intrusion detection system using entropy-aware feature learning and federated threat intelligence for network attack detection Article Title: Causality-driven hybrid intrusion detection with entropy-aware feature learning and federated intelligence Article References: Gupta, S. K., Gupta, Y. K., & Verma, A. K. (2026).
Causality-driven hybrid intrusion detection with entropy-aware feature learning and federated intelligence.
Oct 17, 2026 · via bioengineer.org
Dairy farms are quietly becoming some of the most data-intensive environments in agriculture.
Welfare assessment on most dairy farms still depends on periodic human observation and a short list of visible indicators.
Current evidence is strongest for task-level environmental and behavioral monitoring and selected anomaly detection; it remains less mature for validated latent welfare-state inference, trajectory forecasting and closed-loop control.
Subject of Research: AI and IoT architectures for continuous dairy cattle welfare assessment and digital twin decision support Article Title: AI-IoT architectures for dairy welfare assessment: multimodal monitoring, deployment constraints, and the emerging role of digital twins Article References: Zhang, Y., Bai, D., Li, Y., Han, G., Xie, X., Gotoh, T., Zhao, K., & Ma, Y.
AI-IoT architectures for dairy welfare assessment: multimodal monitoring, deployment constraints, and the emerging role of digital twins.
Oct 17, 2026 · via bioengineer.org
Industrial computing leader Advantech (2395.TW) announced the signing of a memorandum of understanding with international testing and certification body DEKRA.
The AFE-E630 is an industrial edge system specifically designed for commercial and industrial energy storage management applications.
This assessment result provides a verified product cybersecurity foundation for related applications and further supports customers in subsequent product integration and system-level compliance requirements.
The logic behind this expansion lies in the fact that emerging applications such as robotics and drones have even more stringent cybersecurity requirements.
Through deep collaboration with a third-party certification body, Advantech is positioned to gain differentiated advantages in the increasingly competitive industrial cybersecurity arena.
Oct 17, 2026 · via finance.biggo.com
Connected sensors, Bluetooth beacons and electronic shelf labels can help businesses identify gaps on shelves, reveal how customers move through stores and inform inventory and merchandising decisions.
Turning that data into actionable insights across multiple locations, however, requires reliable integration between connected devices and retail systems.
How IoT in retail powers the connected store In brick-and-mortar settings, IoT lets you sense and respond to activity across the zones you instrument.
Embedded sensors capture shopper behaviour, real-time data pipelines feed those signals into merchandising decisions and connected displays act on the results.
Use shopper movement data to rework store layout Before redistributing anything, you need to know how people actually move through the aisles.
Oct 17, 2026 · via iotinsider.com