IT, AI & Telecommunications

Global – October 31, 2026 -- CrowdStrike Counter Adversary Operations has observed no successful exploitation of the PHP2Shell vulnerabilities in the wild or in its honeypot environments, only testing, probing and unsuccessful attempts.

The firm has also found no fully weaponized exploit, and no proof-of-concept (POC) exploit sufficient for widespread exploitation. Opportunistic attackers are likely to favor proven alternatives, because several other vulnerabilities already deliver unauthenticated remote code execution (RCE) against PHP applications reliably and at scale.

PHP disclosed two CVEs affecting four release branches on October 21, 2026

CVE-2026-109618 and CVE-2026-109619 affect PHP versions earlier than 8.2.35, 8.3.36, 8.4.27 and 8.5.12. Preliminary analysis by industry sources and the vendor indicates that many older versions, including end-of-life releases, are also affected and may receive only limited patches.

Las Vegas – October 31, 2026 -- CrowdStrike's Falcon Guardian has been deployed at hundreds of organizations since its September 1, 2026 launch, and early users report finding over 260 distinct AI services at a single organization and confidential documents being shared with public AI chatbots.

Customers span financial services, healthcare, manufacturing, retail, energy and the public sector. They are responding to the shift from AI that generates content to agents that reason, decide and act autonomously. Employees run AI assistants in browsers and desktop apps, developers run coding agents that read files and execute commands, and business teams connect agents to enterprise data through Model Context Protocol (MCP) servers.

Tokyo – October 31, 2026 -- SAP SE and NTT, Inc. have announced their intention to cooperate on SAP Sovereign Cloud and SAP Business AI, starting with a combined offering that pairs SAP Sovereign Cloud On-Site with NTT-managed infrastructure and operations in key markets.

SAP Sovereign Cloud On-Site runs in customer-owned or customer-selected data centers

The offering targets customers with stringent sovereignty, regulatory and compliance requirements. It lets SAP-managed cloud solutions operate in a data center the customer owns or selects. SAP says this gives organizations local physical control, data residency and operational assurance while helping them meet applicable local legal and regulatory requirements.

TOKYO – October 31, 2026 -- NTT DOCOMO BUSINESS, Inc. has been named Runner-Up in the Asia-Pacific Communications Service Providers (CSPs) category of the Gartner Eye on Innovation Awards 2026 for its AI-native, SaaS-based communication service docomo business ANCAR, finishing directly behind the Winner.

The result extends the company's run at the awards to two consecutive years. In 2025, it became the first Japan-based company to win the APAC category, for docomo business RINK, a network-as-a-service (NaaS) offering that combines network and security functions.

ANCAR embeds AI in the carrier network to serve contact centers, branches and stores

ANCAR combines carrier-grade voice infrastructure with AI to optimize customer touchpoints, including contact centers, branch offices and retail stores. NTT DOCOMO BUSINESS says it can be added to existing voice services without new on-premises hardware or large-scale systems integration.

Global – October 31, 2026 -- CIQ has released Stratum Kubernetes Engine (SKE), an Apache 2.0-licensed distribution that packages the roughly ten upstream projects a Kubernetes cluster needs into one signed file for installing, joining, upgrading and maintaining clusters on Enterprise Linux.

CIQ built SKE to cut the upkeep cost that AI workloads add, since training and inference spread across many systems and capacity moves with demand. The company is the team behind Rocky Linux, Fuzzball, Warewulf and Apptainer.

SKE pins and tests every component as one set

SKE builds Kubernetes, etcd, containerd, runc and kube-vip from unmodified upstream source. It adds Cilium for networking and CoreDNS for cluster DNS. Users download the file for their architecture and run stratum up.

The same file then handles four post-install jobs:

Global – October 31, 2026 -- A PHP vulnerability that stalled in triage after a 2024 audit became unauthenticated remote code execution this year once researchers applied frontier AI models, and both PHP2Shell CVEs now carry a CVSS v4.0 score of 9.2.

PHP Foundation admits a 2024 finding stalled for lack of a proven exploit

A 2024 external audit led a PHP core developer to the first signs of an out-of-memory problem, according to the PHP Foundation's account of CVE-2026-109618. An exploit was theorized, but no one found a concrete attack vector. Each candidate fix carried a cost: a compatibility break, new denial-of-service potential, or changes to third-party extensions that seemed impossible to coordinate. Work on the fix stalled and restarted for months.

California – October 31, 2026 -- Switching off Gemma 4's default reasoning with a single flag raised accuracy by up to 48 points, cut cost 6x to 8x and made a correct answer up to 19x faster on short verifiable tasks, according to a 27-model local benchmark run on a Strix Halo machine with a power meter attached. The 12B and 26B variants rose from about 52% to 100% on the easy suite.

Each model answered 190 checkable tasks twice, under two different prompts. Electricity was priced at California summer rates of 34 cents per kilowatt-hour off-peak and 58 cents on-peak.

Gemma 4 reasons on 95 of 95 tasks even when told not to

Asked for a one-line answer with no explanation, Gemma 4 emitted reasoning on every task in both prompt conditions. On a 4,096-token budget, the 12B and 26B spent the entire allowance thinking and returned nothing on roughly half the questions.

Global – October 31, 2026 -- CIQ is preparing the ML-KEM and ML-DSA post-quantum algorithm implementations in Network Security Services (NSS) for FIPS 140-3 validation. Distinguished Engineer Jeremy Allison, a Samba co-creator, leads the effort, which also covers Common Criteria evaluation for Rocky Linux from CIQ Pro (RLC Pro) and other CIQ products.

Transpiled Rust code forces repeated manual remediation at CIQ

Part of the NSS implementation was written in Rust and transpiled into C. The generated code worked but was not ready for FIPS validation. Its functions copied intermediate values onto the stack, and those values had to be securely erased before the functions returned.

ABU DHABI – November 01, 2026 -- Context Labs B.V. launched the AI Distillery, a Context Engine that converts an enterprise's operational and business data into a governed, customer-owned Context Package. The package works with any frontier or open-weight model and runs inside the customer's own environment. The product is available now through the Microsoft Marketplace.

Gartner and McKinsey data frame the AI-readiness gap

Gartner predicts organizations will abandon 60% of AI projects unsupported by AI-ready data through 2026. It also expects over 40% of agentic AI projects to be canceled by the end of 2027. McKinsey reports that eight in ten companies cite data limitations as the barrier to scaling AI agents.

Vienna – November 01, 2026 -- Austrian AI company Digicust has appointed Alexander Miklautz, previously Head of Marketing at PwC Austria, as Head of Global Partnerships & Events, effective November 1, 2026. The hire makes strategic partnerships a standalone growth channel alongside direct enterprise sales.

Miklautz will develop the partner network and joint market-entry and sales initiatives. Digicust is targeting customs software vendors, consulting and implementation firms, technology companies and industry organizations. The goal is deeper integration of its platform into existing system landscapes and access to new markets.

Miklautz to build a structured partner program with training and marketing support

He will expand the partner program with defined cooperation models, joint market-development plans, and training and marketing offerings for partners. Trade events and industry formats are intended to generate new collaborations.