On October 21, the PHP project released emergency patches for two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting essentially every version of PHP. Both can allow a remote attacker to run code on an unpatched server, so we are treating this as a top-priority issue. What we're doing We began mitigation before the patches ... Read More »

You may have seen news about the latest Linux kernel exploit called "copy.fail".   We have applied mitigations to prevent this.   If you have any questions or concerns on this, please let us know.