Cybersecurity Weekly Recap (Oct 19–26, 2026): 9 Threats You Need to Know, from PHP2Shell to GitLab CVSS 10
It was an “Everything2Shell” week: critical remote code execution bugs in PHP, Brotli and Plex, a CVSS 10 GitLab flaw, a certificate authority quitting over weak keys, and a poisoned LiteLLM release. Here’s what happened, who’s affected and a prioritised patch checklist.
12 min read