Technology solutions. Workforce development.
DCI Resources, LLC supports organizations and learners with IT services, cybersecurity, AI, hands-on training and certification preparation.
Explore services and connect with our team: https://t.co/p6XoOgd4pc
Some Government of Canada websites have been temporarily taken offline as a precaution to protect government systems and Canadians' information, following guidance from the Canadian Centre for Cyber Security.
This is in response to a vulnerability identified in PHP, software used by websites around the world. This is a global issue, and other governments and organizations are also taking protective measures.
If your organization uses PHP, apply the latest security updates as soon as possible and follow @cybercentre_ca for updates.
We take this situation extremely seriously. Thank you to the cyber security teams working to protect the services Canadians rely on. Affected websites will be restored once patches are applied.
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 https://t.co/W4kfzx5lxz
#NodeJS#Security
The PHP project has released fixes for 2 critical vulnerabilities affecting servers that host PHP applications. Site owners and technical teams should confirm their hosting provider’s update plan and update PHP immediately. Versions before PHP 8.2 no longer receive security updates. These issues are not specific to WordPress, and no WordPress update is required. https://t.co/2Bgok9Vdcq
Personal Intelligence is now rolling out for Gemini on Android Auto and in the coming months to cars with Google built-in, so you can get even better hands-free help on the road.
With your permission, Personal Intelligence securely connects information from the Google apps you already use — like Gmail, Google Calendar, and Search — so you can make complex requests, get personalized recommendations, retrieve details from past conversations and more.
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP. Where immediate remediation is not feasible, organisations should consider taking the system offline until it can be fully mitigated.
For more⬇️
https://t.co/l6TDtVurJN
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on https://t.co/rDrPSxB3zX. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or https://t.co/iqgVZIbCru. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on https://t.co/rDrPSxB3zX, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
Make an attacker to regret ever stepping foot in your environment. Craig Jackson joins the show to convince you to double down on segmentation, and discuss the newest industry buzz: AI kill switches. https://t.co/vSCkIFrHDX
It’s Cybersecurity Month! 🛡️
Join our latest Cisco Champion Radio episode to learn how AI, Zero Trust, and fresh CCNP updates are bridging the industry’s biggest skills gaps.
Listen here: https://t.co/jbKz7KmT97