A leading provider of #offensivesecurity solutions & contributor to the #infosec community. #pentesting #hacking VC @forgepointcap @carrickcapital @WestCap8
Tempe, AZ
Joined April 2013
- Tweets12.3K
- Following4.3K
- Followers26.3K
- Likes19.3K
🚨 The PHP project has released security updates addressing two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that could allow unauthenticated attackers to execute code remotely on affected servers.
Both vulnerabilities carry a CVSS v4.0 severity score of 9.2, and early attack activity has been reported. Organizations running PHP should prioritize identifying affected systems and applying the available security updates.
Bishop Fox recommends five actions in the next 24 hours:
1️⃣ Identify every PHP installation. Prioritize internet-facing systems, including vendor-hosted sites, appliances, container base images, and forgotten test servers.
2️⃣ Patch immediately. Update to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35, or apply your Linux distribution's patched package. For PHP 8.1 and older, obtain a vendor backport or upgrade. Rebuild affected container images.
3️⃣ Restart and verify. Restart PHP-FPM, Apache, and other PHP workers. Confirm the running version on every system.
4️⃣ Isolate unpatched systems. If you cannot patch today, remove affected systems from internet exposure. WAF rules and configuration changes may reduce exposure, but they do not eliminate the risk.
5️⃣ Hunt for compromise. Review systems exposed since October 20 for unexpected files in web directories, suspicious PHP-spawned processes, and unauthorized admin accounts.
Our Threat Research & Analysis team is conducting deeper analysis of these vulnerabilities, including potential attack paths and implications for affected environments. We'll share additional findings and guidance as they become available.
More choice in continuous security testing. Bishop Fox now offers three standalone managed services:
• Attack Surface Discovery
• Attack Surface Testing
• Emerging Threat Testing
Choose one or combine them to fit your security program.
Bishop Fox retweeted
Beyond the Hype: What Mythos Actually Means for Security Teams
Capable models and meaningful security outcomes are not the same thing. This session brings together leaders who have spent time with Mythos to examine where it fits in the SDLC, what it actually costs at scale, and whether it delivers real value or still requires seasoned expertise to use well.
Watch this on-demand session by @bishopfox, a Health-ISAC Community Services Champion. health-isac.org/beyond-the-h…
“We can't patch medical devices because the FDA won't let us.”
Shad Malloy challenges that assumption at @HealthISAC's workshop on Oct. 22, drawing on 160+ Bishop Fox healthcare assessments.
St. Paul, MN | 10:05 AM CDT
When ransomware hits a hospital, the consequences extend beyond data loss.
Join experts from @Moderna, @Holland_Knight, and @bishopfox on Nov. 10 to discuss AI-enabled threats, ransomware readiness, and protecting patient care.
When ransomware hits a hospital, the consequences extend beyond data loss.
Join experts from @Moderna, @Holland_Knight, and @bishopfox on Nov. 10 to discuss AI-enabled threats, ransomware readiness, and protecting patient care.
Bishop Fox retweeted
Healthcare Security at Machine Speed: $17M Ransomware & AI Adversaries webinar with @bishopfox on Tuesday, November 10th at 3 PM ET!
This session connects healthcare security strategy to these operational decisions: how to evaluate response assumptions, assign ownership across departments, and prioritize investments that support continuity of care.
Register Here: bishopfox.com/resources/heal…
