@EM360Tech 1. Ask ChatGPT if you are vulnerable.
2. If you are, ask it how to update PHP.
3. Follow instructions.
Almost easier than figuring out how to "take down" your website.
@EM360Tech 1. Ask ChatGPT if you are vulnerable.
2. If you are, ask it how to update PHP.
3. Follow instructions.
Almost easier than figuring out how to "take down" your website.
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on https://t.co/rDrPSxB3zX. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or https://t.co/iqgVZIbCru. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on https://t.co/rDrPSxB3zX, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Software engineering as we know it could disappear by 2028.
Our CEO @dvdhsu joined @EM360Tech to discuss that prediction, the rise of vibe coding, and why enterprise governance matters more than ever.
Watch the full conversation ↓
https://t.co/fJpfrRarkz
The full conversation moves beyond the @OpenAI example to explore developer feedback, @temporalio's community and its @CPFC partnership. Watch to the full Temporal conversation on @EM360Tech
https://t.co/fBg2EN89Yd
@OpenAI's use of @temporalio grew 60x in under a year.
In this #TechTransformed clip, Christina Stathopoulos asks what changed as OpenAI scaled—and Herrera explains Temporal's role in handling enterprise-scale workflows.
For the broader discussion about vibe coding, enterprise governance and the CIO's future responsibilities, watch to the full @retool conversation on @EM360Tech
https://t.co/9sOjLgrgj8
Could software engineering disappear as a profession by 2028?
@retool CEO David Hsu thinks it could. In this #TechTransformed clip, Shubhangi Dua asks how the CIO's role might change as AI transforms software development.
Is that prediction plausible?