Back Theregister

AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours

Theregister • October 27, 2026

Share: View original

Oracle plans to add those chips alongside new Nvidia hardware and OpenAI services as businesses await AI payoffs

Anthropic now lets Claude users jump out of plane without parachute

Meet CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS

PHP2Shell: No login, no app code, no warning. What ?

PARTNER CONTENT: Learn what the flaws are, how far exploitation has gone, and how to get to full coverage fast with Tanium

AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours

One critical, three high-severity EPICS bugs could disrupt research experiments

PHP2Shell is a warning shot for vulnerability disclosure

Keeping secrets is difficult in an open world, but we've done it before and must do it again

Apple takes powerful M6 chip to the MacBook Pro, iMac

6th-gen M-series silicon promises more cores, faster memory, a fatter NPU, and better connectivity, now in more form factors

Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’

OpenClaw creator says he spent $10 million in tokens last month

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

PHP2Shell exploit bypasses protections designed to stop remote code execution

There's a third PHP2Shell bug, but it won't get an emergency fix

UK ministers had plenty of time for AI datacenter bosses, but none for environmental groups Investigation finds businesses dominated govt meetings while communities were left out of decisions AI Growth Zones

UK ministers had plenty of time for AI datacenter bosses, but none for environmental groups

Investigation finds businesses dominated govt meetings while communities were left out of decisions AI Growth Zones

Humanity can't afford not to spend $800B on AI, Anthropic insists It's more important than chips, 'leccy and the net, after all

Humanity can't afford not to spend $800B on AI, Anthropic insists

It's more important than chips, 'leccy and the net, after all

OpenAI rolls out budget-priced mid-tier GPT-6.1 Terra Not a bombshell, but it rivals pricier models on some tasks at a tenth of Astra's API price

OpenAI rolls out budget-priced mid-tier GPT-6.1 Terra

Not a bombshell, but it rivals pricier models on some tasks at a tenth of Astra's API price

's r/opensource bans AI slop, and quite a few humans for good measure New rules also shut out solo developers, fledgling projects, and anyone who doesn't speak English

's r/opensource bans AI slop, and quite a few humans for good measure

New rules also shut out solo developers, fledgling projects, and anyone who doesn't speak English

Private equity giant: AI payoff strictly limited to Big Tech The Magnificent Seven are galloping off with the profits, while the rest of the S&P 500 see no benefit, claims Apollo

Private equity giant: AI payoff strictly limited to Big Tech

The Magnificent Seven are galloping off with the profits, while the rest of the S&P 500 see no benefit, claims Apollo

Security Russians are posing as Signal support to launch phishing attacks PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!

Russians are posing as Signal support to launch phishing attacks

PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!

Security Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more

Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack

PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more

Black Hat and DEF CON DEF CON Franklin project enlists hackers to harden critical infrastructure Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included

Black Hat and DEF CON

DEF CON Franklin project enlists hackers to harden critical infrastructure

Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included

Security EQT buys majority in Swiss cybersecurity biz Acronis Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified

EQT buys majority in Swiss cybersecurity biz Acronis

Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified

Malware Month Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight On the plus side, infosec's a good bet for a long, stable career

Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight

On the plus side, infosec's a good bet for a long, stable career

FreeBSD founder ports Omarchy to FreeBSD in ten days, ten releases Daemonarchy is unaffiliated with the Linux original, built with AI help, and could complicate FreeBSD's debate over AI contributions

FreeBSD founder ports Omarchy to FreeBSD in ten days, ten releases

Daemonarchy is unaffiliated with the Linux original, built with AI help, and could complicate FreeBSD's debate over AI contributions

SparkyOS: Lightweight general-purpose Arch, on a pendrive Interesting new project from the minds behind SparkyLinux

SparkyOS: Lightweight general-purpose Arch, on a pendrive

Interesting new project from the minds behind SparkyLinux

Red Hat helps teach tech writing But learns tough lessons AI in the process

Red Hat helps teach tech writing

But learns tough lessons AI in the process

NetBSD may have found a new role: The AI-free FOSS OS Increasing awareness and adoption, followed by increasing donations

NetBSD may have found a new role: The AI-free FOSS OS

Increasing awareness and adoption, followed by increasing donations

OpenAI dots inspire open source imitators amid technical difficulties Persistent agents appeal to AI companies, but demand isn't obvious

OpenAI dots inspire open source imitators amid technical difficulties

Persistent agents appeal to AI companies, but demand isn't obvious

Ubuntu 'Stonking Stingray' beta swims out: Deeper Rust 'oxidization' plus LLM speech-to-text GNOME 51 is here, and Ubuntu interim releases are getting interesting again

Ubuntu 'Stonking Stingray' beta swims out: Deeper Rust 'oxidization' plus LLM speech-to-text

GNOME 51 is here, and Ubuntu interim releases are getting interesting again

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PHP2Shell Exploit Bypasses Protections, Affects Multiple Systems A critical vulnerability known as PHP2Shell has been reported, allowing remote code execution without authentication. This exploit has been linked to multiple systems, including PHP applications, where it can bypass existing protections. The vulnerability is notable for its ease of exploitation, as it requires no login or application code. Security experts are urging site owners to take immediate action by applying critical patches and taking systems offline if. The exploit has been described as a significant warning shot for vulnerability disclosure practices. Affected systems include those relying on PHP, with developers advised to implement the latest fixes. The situation is compounded by the ongoing threat landscape, where similar vulnerabilities have been. As of now, the exploit is actively being reported and investigated by cybersecurity professionals. 6 sources 73

Extracted Entities

AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hours

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)