Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks.
The FBI urges organizations to take the following steps now:
➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated.
➡️ Immediately update affected PHP installations following the guidance on https://t.co/rDrPSxB3zX. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP.
➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation.
➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or https://t.co/iqgVZIbCru. Those reports help us identify the actors involved and warn other organizations before they become victims.
For the latest information, follow PHP’s announcement on https://t.co/rDrPSxB3zX, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
X Premium is now part of The X Subscription. Get your X benefits plus AI usage in Grok and Cursor, starting at $8/month.
Already on X Premium or X Premium+? Your comparable plan on The X Subscription costs the same or less. Switch from your subscription settings on X, or keep your current plan.
🚨☣️BREAKING: Plague outbreak expands, Russia BSL-3 lab accident - FIVE hospitals now quarantined🚨☣️
The plague outbreak in Siberia, Russia has expanded w/5 hospitals now under QUARANTINE: Irkutsk Hospitals No. 1, No.3, No.10, Ivano-Matreninskaya Children's Hospital, and an unnamed maternity hospital (Lyudi Baikala news, Moscow Times).
Quarantine is NOT voluntary. Even in the U.S., quarantine is among the most extraordinary measures gov't can impose on American citizens who haven't been convicted, or even accused, of committing a crime. Quarantine means being forcibly confined and medically examined by law. U.S. quarantine can be imposed on anyone infected by a legally quarantinable disease listed below (this can change). One should assume Russia's quarantine protocols are even more severe. As of 2026, under Executive Order 14047, legally quarantinable diseases in the U.S. are:
■ Plague
■ Smallpox
■ Viral hemorrhagic fevers
■ Cholera
■ Diphtheria
■ Yellow fever
■ Infectious tuberculosis
■ Severe acute respiratory syndrome (SARS)
■ Flu that can cause a pandemic
■ Measles
Photo: Russia’s RKhBZ defense troops perform nuclear, biological, and chemical defense training (w/permission from the Ministry of Defence of the Russian Federation) — from BIOLOGICAL WAR: A SCENARIO by Annie Jacobsen (Dutton, 2026).
Introducing Claude Sonnet 5.5, the second model in the Claude 5.5 family.
It’s a clear upgrade over Sonnet 5, runs more than 30% faster, and costs up to 30% less for most work.