The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
Flax Typhoon threat actors use automated scanning tools, large-scale botnets, and hands-on exploitation techniques to steal sensitive data from organizations around the world. These actors are linked to the PRC government and associated with Integrity Technology Group, a China-based company.
The @FBI, @CISAgov, @NSAGov, and international partners have issued a joint cybersecurity advisory on these actors to help network defenders and reduce the risk of compromise. Organizations across critical infrastructure sectors should review the TTPs, IOCs, and mitigation strategies in this report 🔗 https://t.co/DYDtc3JO2x
Today, the @FBI and @TheJusticeDept announced the disruption of hacking tools used by the cyber threat group Flax Typhoon. We seized multiple domains and blocked access to platforms used to scan, and in some cases infiltrate, U.S. critical infrastructure.
Flax Typhoon is associated with Integrity Technology Group, a company linked to the Chinese government that targets U.S. and foreign networks with a combination of large-scale botnets, living-off-the-land techniques, and various other tools.
The PRC relies on contractors and enabling companies to expand the reach of its malicious cyber activity. By exposing and disrupting these enablers, we are making it harder for the PRC to target American infrastructure.
🔗 https://t.co/Ki3lcsso4m
It was an honor to reunite with former President @iingwen, a courageous champion of democracy and a dear friend of America.
The bond between the United States and Taiwan is strong, and Congress’ commitment to the Taiwanese people and their freedom remains steadfast.