The Stack

The Stack — October 22, 2026

10:11

Daily IT Briefing

Cybersecurity

Today is a heavy security day. Three critical incidents hit core web and developer infrastructure: the PHP runtime, the TLS trust chain, and a widely used AI gateway library.

"PHP2Shell": critical RCE in the PHP engine, patches out now

Early reports described two emergency PHP releases as imminent and called the "PHP2Shell" exploit unconfirmed. The full…