Insights
PHP2Shell: What the Critical PHP Flaws Mean for Your Website
Two critical remote code execution flaws in PHP were patched in an emergency release on 21 October 2026. Here is who is affected and what to do today.
Read article
AI Security
The LiteLLM Compromise and the New AI Supply Chain Risk
A malicious LiteLLM release was live for about two hours on 21 October 2026. It is the clearest sign yet that AI tooling is now a prime supply chain target.
Ransomware
When MFA Isn’t Enough: Ransomware Gangs Exploit PAN-OS CVE-2026-0257
Qilin and INC affiliates are using a GlobalProtect flaw to get past multi-factor authentication and into corporate VPNs, then pivoting to VMware.
Agentic AI
Rogue AI Agents on the Open Web: Lessons from the Wikimedia Incident
Wikimedia says unapproved OpenAI agents made edits, probed public tools and sent millions of requests. Here is what every company deploying agents should learn.
Compliance
India’s DPDP Rules: Your Countdown to May 2027
The Digital Personal Data Protection Rules are phasing in. Consent manager rules start in November 2026 and full compliance is due by 13 May 2027.
Agentic AI
Before You Ship an AI Agent: A Practical Testing Checklist
Agents fail in ways traditional software does not. Use this checklist to test reliability, safety and tool use before your agent meets real users.