Cybersecurity

Global – November 10, 2026 -- CIQ shipped fixed PHP 8.0 packages for Rocky Linux from CIQ Pro (RLC Pro) LTS 9.6 and 9.2 about three and a half hours after the PHP project released its PHP2Shell fix, covering a version upstream no longer supports.

CIQ built PHP 8.0.30 fixes from source-only upstream backports

The PHP project announced a critical security release the day before, disclosing only its severity. CIQ staffed up ahead of disclosure. The upstream fix went public just before 14:00 UTC, and within the hour the base PHP 8.0 fixes for both LTS releases were in review.

The project shipped fixed releases for PHP 8.2, 8.3, 8.4 and 8.5. For PHP 8.0 it published only "minimal source-backports" and no official binaries. RLC Pro LTS 9.6 and 9.2 ship PHP 8.0.30, so CIQ engineers built, tested and published php-8.0.30-3.4.el9_6_ciq for LTS 9.6 and php-8.0.30-1.2.el9_2_ciq for LTS 9.2.

Global – November 10, 2026 -- The PHP project shipped fixes on October 21 for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 under CVSS v4.0 and enabling unauthenticated remote code execution (RCE) over HTTP. Dubbed PHP2Shell, the flaws sit in the language itself, so every application built on PHP inherits the exposure.

Wiz says every PHP version back to 5.4 is affected

Wiz, one of the groups that reported the bugs, says PHP powers 70% of the world's websites. Against Apache with mod_php, the attack works before any application code runs.

SYDNEY – November 10, 2026 -- Microsoft will stop delivering SMS and Voice multi-factor authentication (MFA) through Microsoft Entra ID from 1 February 2027. Australian communications company Soprano Design has launched a replacement delivery route for customers that still depend on both methods.

Microsoft shifts Entra customers to their own telephony providers

Microsoft is retiring telephony-based authentication delivery as it moves towards passkeys as the default authentication experience. Organisations that need to retain SMS or Voice MFA must select and manage their own telephony provider.

Soprano Connect for Microsoft Entra goes on sale via the Microsoft Security Store

The product carries per-user and per-transaction pricing options. It targets organisations with a business, regulatory, technical or operational requirement to keep SMS or Voice MFA beyond 1 February 2027.

MELBOURNE, Australia – November 10, 2026 -- Cisco is adding Anthropic's Claude Mythos to its AI Defense red teaming framework, giving security teams frontier-level adversarial reasoning to stress-test AI applications and agents, while Splunk and Cisco IQ updates tie agent cost and infrastructure exposure to remediation workflows.

Adaptive red teaming with Claude Mythos is coming soon for select enterprises. Cisco launched AI Defense in January 2025 and says it has since helped hundreds of customers find critical flaws in AI models, applications and agents before production.

Global – November 10, 2026 -- Only a fraction of AI-generated Linux kernel vulnerability patches can ship without modification, even with the best models available, according to enterprise Linux vendor CIQ. The company responded to OpenAI's announcement that it had discovered 948 Linux kernel vulnerabilities and generated patches it offered to the upstream Kernel.org project.

CIQ's kernel engineers use AI to explore fixes. Finding a bug and drafting a patch are now fast, the company says, but a fix that is safe, maintainable and compatible across years of supported kernels still takes expert engineers. OpenAI's own testing found that patches fixing the exploit could still cause performance issues, violate coding conventions or miss variants of the vulnerability.

Palo Alto – November 10, 2026 -- Mesh Security has appointed five cybersecurity leaders from Zscaler, Ivanti, Sapiens, AMINA Bank and the Zero Trust research community to its strategic advisory board, as AI agents and non-human identities widen the enterprise attack surface.

Advisors will steer product priorities and board-level reporting

The five will give practitioner input on Mesh's product priorities, enterprise adoption, and board-level reporting and decision-making. Their combined experience spans cloud security, enterprise software, insurance technology, regulated banking and Zero Trust strategy.

Mesh CEO and co-founder Netanel (Neo) Azoulay said "attackers move across the boundaries between" security tools, and that the advisors will help Mesh show teams which attack paths are genuinely exploitable.

SALT LAKE CITY – November 10, 2026 -- Fifty-eight percent of surveyed teams ship code faster than security reviews can keep up, according to a 2026 study supported by the Open Source Security Foundation (OpenSSF), as the Linux Foundation initiative expands its AI security programs and adds three members.

Survey finds 60% of teams report more external packages from AI coding assistants

The State of AI Impact on Software Security and Cybersecurity 2026 report was supported by OpenSSF, ActiveState and the LF AI & Data Foundation. It found that 60% of respondents say AI coding assistants have increased the number of external packages in their codebases. OpenSSF says AI speeds up both code production and vulnerability discovery for attackers and defenders. Reporting windows are also shrinking under regulations such as the EU Cyber Resilience Act.

Foster City – November 10, 2026 -- Qualys (NASDAQ: QLYS) has expanded its global mROC program to five strategic technology alliance partners (Claroty, Lookout, NowSecure, Nozomi Networks and Okta), feeding risk data from mobile, OT/IoT and identity systems into its Enterprise TruRisk Management (ETM) platform.

Partner telemetry flows into a single TruRisk score

Qualys says these attack surfaces are among the least measured in the enterprise. Phones, connected devices, industrial and medical systems, and identities often cannot run a traditional agent or tolerate active scanning. Their risk therefore goes unmeasured or sits in a separate tool with its own scoring.

MONTREAL – November 10, 2026 -- Devolutions will let IT teams approve, install and update software across enrolled devices without granting local administrator rights, as part of the first phase of its endpoint privilege management roadmap. The features are expected to reach general availability in December 2026.

Device enrollment and UniGetUI extend PAM from access control to software governance

The update adds device enrollment from existing mobile device management (MDM) solutions and centralized software management powered by UniGetUI. It is designed to work alongside Microsoft Intune. Administrators can view enrolled devices in the same workspace they use for privileged access management (PAM) and manage software across major package managers.

Berlin – November 09, 2026 -- Cyber risk has risen in every industry group examined by Mittelstand-Digital, even though cybersecurity levels improved in eight of ten groups, according to the study cited by information security consultant Joachim Reinke of einfachISO. He identifies five recurring misjudgments that leave German mid-sized companies exposed.

Automated scans make small companies targets by default

Many SMEs assume criminals ignore them. Attackers often deploy automated programs that search the internet for known vulnerabilities, test stolen credentials and send phishing emails in bulk. Criminals typically assess a victim's value only after breaching it.