Espresso

Sign in Subscribe

Cybersecurity

PHP2Shell Flaws Took European Government Sites Offline

Disclosed October 20, 2026, the PHP2Shell flaws affect PHP 5.4 through 8.5, and emergency patches arrived the next day. European agencies took public sites offline rather than risk unauthenticated code execution; outages, not confirmed theft, were the measured cost.

Read next

Screenshot-style view of a PyPI release page for LiteLLM version 1.107.0 with package and container registry links.

Malicious LiteLLM 1.107.0 build pulled from PyPI and Docker Hub

Attackers pushed a malicious LiteLLM 1.107.0 build to PyPI and container registries on Oct. 21, 2026, pulled the same day. Startup files ran with installer permissions, so credentials on affected machines stay valid until rotated.

Screenshot-style view of an online takeaway menu showing a dish photo beside its written description.

Just Eat Pulls AI Menu Photos After Dishes Came Out Wrong

Just Eat withdrew AI-generated menu photos after customers on Irish and Belfast menus saw dishes that didn't match what kitchens served. Images were labeled "AI generated," but the label didn't prevent the wrong dish from being pictured.

Illustration of a Chrome browser window flagged with a critical security warning, with a crossed-out calendar showing an October deadline.

No Federal Agency Met CISA's Oct. 20 Chrome Patch Deadline