Weekly Wire #15: PHP's Decade-Old Hangover

There is a special kind of dread that comes from learning a bug has been sitting in code for decades. Not because nobody looked, but because nobody managed to chain the right pieces together until now. This week, frontier AI did exactly that to PHP, reminding the internet of an uncomfortable truth: the web still runs on a language so ubiquitous that fixing it is less like patching a product and more like changing the foundation of a building while people are still living in it.

In brief

• Two critical PHP RCE flaws affect virtually every version since 5.4, with working exploits already spotted in the wild and emergency patches released across the ecosystem.
• AI-assisted research turned long-dormant bugs into exploitable chains, with OpenAI and Wiz comparing the effort reduction to a turning point in vulnerability discovery.
• Microsoft’s record Patch Tuesday fixed over 1,400 flaws, while the LiteLLM supply-chain compromise showed how quickly malicious packages can spread through the AI tooling ecosystem.
• ConnectWise customers were hit by a supply-chain attack via compromised API secrets, granting access to Microsoft 365 tenants through backup identities.
• OpenCode quietly patched a critical RCE affecting roughly 1.4% of users with external AI providers connected, a reminder that AI dev tools are now high-value targets.

Digital forensics & DFIR

• Operation FlashHole: Lazarus breaks security, defies control — Kaspersky’s deep dive into Lazarus tooling shows the group continuing to evolve its tradecraft despite years of sanctions and exposure. The patience and operational discipline on display is a useful counterweight to the idea that public attribution ever meaningfully slows these crews down.
• The journey of a paper unicorn: adventures inside a modern warehouse — OT and supply-chain security rarely get this kind of narrative treatment, following the digital trail through a warehouse environment. It’s a reminder that the “boring” infrastructure keeps the world running, and is precisely what adversaries notice when everyone else is looking at endpoints.

Threat intelligence & APT

• Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement — The targeting of defense-industrial base and law enforcement fits a long-running GRU pattern of collecting intelligence ahead of geopolitical friction. What’s notable is the breadth: not just classified programs, but the suppliers and contractors that feed them.
• Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site — Krebs’ reporting on the blurred line between negotiators and operators is the kind of uncomfortable detail that keeps coming up. The extortion ecosystem thrives on these gray roles, and law enforcement is starting to look past the “middleman” label.
• SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warn — Six hundred victims across critical infrastructure is a staggering number for a single ransomware group. The scale suggests either aggressive affiliate recruitment or a very efficient initial access pipeline, and either way it’s a problem for defenders.

Privacy & surveillance

• AI doxing tools: how online surveillance technology has changed — Kaspersky’s look at AI-powered doxing shows how cheap and accessible these capabilities have become. What used to require OSINT expertise can now be automated, lowering the barrier for harassment campaigns and blurring the line between research and abuse.
• Meta glasses caught recording conversations without wake phrase — Wearable cameras with always-on capture raise questions that policy has yet to answer, and “it was a bug” doesn’t resolve the consent problem. The technology is outpacing social norms faster than legislation can keep up.
• Grindr users’ sensitive data shared through ad auctions without valid consent — A $9.6 million fine is a start, but the structural issue remains: real-time bidding was never designed for sensitive categories like sexual orientation. Until the plumbing changes, fines will be the cost of doing business.

Policy & legislation

• CRA, pubblicato lo schema di decreto italiano: controlli, certificazioni e sanzioni — Italy’s draft decree for the Cyber Resilience Act is taking shape with ACN oversight, accreditation, and meaningful sanctions. Vendors selling connected products into the EU need to read past the compliance checkbox and look at the enforcement mechanism.
• Federal agencies recommend cyber controls, independent testing for frontier AI systems — CISA and NSA telling frontier AI developers to treat sandbox escapes as reportable incidents is a quiet but significant milestone. The question is whether “recommendations” will become requirements before the first major agentic escape makes headlines.
• US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low — A quarter drop in job postings is worth paying attention to, especially as AI reshapes roles and budgets tighten. The market correction may be real, but the threat landscape certainly isn’t slowing down to match.

Tools & research

• Widespread PHP Flaw May Cause Many Site Outages Today — Krebs’ coverage captures the scale perfectly: two flaws affecting PHP 5.4+, working exploits in the wild, and AI-assisted discovery that turned decades-old bugs into a Log4Shell-scale problem. The comparison is apt, and the patching timeline will likely stretch for months.
• PHP2Shell Exploitation: Two Critical PHP Flaws Explained — Recorded Future’s breakdown of CVE-2026-109618 and CVE-2026-109619 is useful for defenders trying to understand exploitation paths. With Cloudflare already deploying WAF rules and mass exploitation likely, understanding the attack surface matters more than ever.
• LiteLLM release pipeline hacked to distribute info-stealer malware — A compromised PyPI release of a popular LLM proxy distributed credential-stealing malware, hitting developers who installed or updated the package. The AI tooling supply chain is learning the same painful lessons as npm and PyPI did years ago, just at much higher velocity.
• Microsoft Patches More Than 1,400 Security Flaws — Another record-breaking Patch Tuesday, following September’s thousand-plus fixes. At this cadence, “Patch Tuesday” has become triage by necessity; the limiting factor isn’t patch availability, it’s knowing which fixes to prioritize first.

Extra

• Arista patches new VeloCloud Orchestrator zero-day exploited in attacks — SD-WAN orchestration platforms are juicy targets: compromise one and you potentially reach hundreds of branch networks. Zero-day exploitation in the wild makes this one to patch immediately.
• ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 — Another MSP platform breach cascading to customer Microsoft 365 tenants via stolen API secrets. The pattern is painfully familiar: backup and remote management tools remain the shortest path to mass compromise.
• OpenCode Breach Could Affect OpenAI, Anthropic and Google — Roughly 1.4% of OpenCode Console users with external providers connected were affected by a critical RCE. AI coding assistants are now infrastructure, and their security posture needs to match that reality.

The pick of the week is KrebsOnSecurity’s coverage of the widespread PHP flaws, because it captures the week’s central tension perfectly: a language powering 70% of the web, bugs hiding for decades, and frontier AI turning them into weaponizable exploits. Next week, watch for mass exploitation of the PHP flaws as patches propagate slowly through hosting providers, and see whether the LiteLLM incident reveals a broader campaign targeting AI supply chains.

FAQ

What made this week’s PHP vulnerabilities so significant?

Two critical RCE flaws in PHP (CVE-2026-109618 and CVE-2026-109619) affect all PHP versions from 5.4 onward, impact roughly 70% of websites, and were made exploitable through AI-assisted research. Experts compared them to Log4Shell in scope and severity, with working exploits already observed in the wild.

What are the most important cybersecurity events of the week of 2026-10-18?

Emergency PHP patches for two critical RCE flaws with working exploits in the wild, Microsoft patched over 1,400 flaws in a record Patch Tuesday, a ConnectWise supply-chain attack hit Microsoft 365 tenants via compromised API secrets, the LiteLLM release pipeline was hijacked to distribute info-stealer malware, and OpenCode disclosed a critical RCE affecting users of external AI providers.

How are articles selected for the Weekly Wire?

Articles are curated from a fixed set of RSS feeds weighted by source reliability and relevance to DFIR, threat intelligence, privacy, policy, and security research. Vendor marketing and press releases are discarded.