Language:EN4 articles
A plain-language guide to how coding assistants get tricked, with real cases from 2026 and the settings that limit the damage.
Binance is investigating a possible security incident. The Guardian reports that Binance said cryptocurrency firms had frozen about $3bn by Thursday evening. Binance has not explicitly confirmed a hack, and no independent source confirms the frozen total or the loss.
PHP fixed two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, on October 21, 2026. A WordPress site is exposed when the PHP under it is unpatched, even if WordPress, its plugins and themes are current. The fix is a PHP update from your host: 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
PHP released fixes on October 21, 2026 for two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, rated CVSS v4.0 9.2. Amazon reports exploitation attempts from October 17. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, or to your vendor's patched package, then review logs from October 17.
