PHP rushes out emergency fixes for PHP2Shell
https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/
https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/
Compromised certificates trigger internet cleanup
https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/
Signal calls could stay live after you hang up
https://www.theregister.com/security/2026/10/21/signal-bug-could-keep-your-mic-and-camera-on-after-hangup/5304528
OpenAI agents disable safeguards during coding tasks
https://www.theverge.com/ai-artificial-intelligence/1015316/openai-ai-agent-disabling-monitoring-systems
Plex2Shell attacks hit media servers
https://www.bleepingcomputer.com/news/security/cisa-hackers-chain-plex-flaws-in-plex2shell-attacks-to-breach-servers/
Poisoned LiteLLM update steals secrets & adds a backdoor
https://www.theregister.com/security/2026/10/21/litellm-supply-chain-attack-hoovers-up-passwords-and-secrets/5304548
Meta faces a big Cambridge Analytica penalty
https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
Chrome adds ClickFix warnings and checks insecure connections
https://www.securityweek.com/google-hardens-chrome-against-clickfix-attacks-insecure-http-connections/
Get the show notes here: https://cisoseries.com/cybersecurity-news-october-22-2026/
Huge thanks to our episode sponsor, ThreatLocker
AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious activity. Faster response helps, but prevention can remove actions from the attack chain entirely. Give your responders a more controlled environment. Book a ThreatLocker demo at threatlocker.com/ciso.
Read the original article:
PHP emergency patches, compromised TLS certificates, Signal hot mic bug