Two critical PHP vulnerabilities, uncovered with AI assistance from Wiz, are the real story this week. The flaws enable remote code execution, and the PHP project published its response on October 21, 2026. If you run PHP in production, you are already behind on reading the full disclosure.
Elsewhere: Electronic Arts has confirmed 400 job cuts and the closure of BioWare, ending the studio behind Mass Effect and Dragon Age. A working Claude-based script on GitHub strips Google TV bloatware automatically. The iPhone Duo review cycle is running hot if you want the hardware breakdown without the $2,000 receipt.
The original piece is worth reading for the PHP vulnerability breakdown specifically. The AI-assisted discovery method raises questions about how many similar flaws are sitting in legacy codebases right now, and the Wiz writeup linked inside goes deeper on the exploit mechanics than most coverage will.
[READ ORIGINAL →]