Tech · October 21, 2026
Two dangerous internet security issues are putting site admins on edge
Developers of the PHP programming language are releasing emergency security patches to address two critical vulnerabilities. These vulnerabilities impact major content management systems like WordPress and Drupal, potentially affecting over 40% of all websites. A second simultaneous security issue involving weak TLS certificate encryption has also been identified, affecting IoT devices and VPNs. Cybersecurity experts are warning of the potential for large-scale attacks and significant cleanup requirements for system administrators.
Read the original coverage
- EngadgetTrade
Two dangerous internet security issues are putting site admins on edge - Engadget
Read at Engadget ↗ - The VergeTrade
A critical PHP vulnerability may take websites down today
Read at The Verge ↗ - Ars TechnicaTrade
PHP warns it plans to release 2 emergency patches imminently
Read at Ars Technica ↗ - ReutersWire
PHP programming language developers issue new version fixing critical vulnerabilities
Read at Reuters ↗ - MSNBCMainstream
Texas trans advocacy group says it is being impersonated in texts and mailers
Read at MSNBC ↗
Reported by multiple outlets
- Emergency security patches are being released for the PHP programming language to fix two critical vulnerabilities.
- PHP is a foundational language for content management systems including WordPress and Drupal.
- The vulnerabilities are considered severe enough to require immediate action from website administrators.
Reported by only some outlets
- The PHP exploit reportedly affects more than 40 percent of the internet.
- A second separate security issue involves weak TLS certificates impacting VPNs and IoT devices.
- Patches were scheduled to drop within a 12-hour window from the time of reporting.
Industry-friendly coverage frames it as…
emphasize the critical nature of the PHP infrastructure and the necessity of immediate patching to maintain web stability
Numbers that differ
- Percentage of internet affected: The Verge reports more than 40 percent of the internet is affected; other sources do not provide a specific figure.
About these outlets
CadNews does not determine absolute truth or endorse political viewpoints. It compares publicly available reporting, identifies shared facts, highlights framing differences, and flags uncertainty.