Back Theregister

Worm armed 42 GitHub repos by hiding a payload too big to fail

Theregister • October 26, 2026

Share: View original

Promises to build ‘IBM Z Atlas’ tool that will tidy up messy big iron and enable AIOps

Japanese virtual desktop cloud hacked so hard it asks to be banned

CEO admits service used for foreign exchange trading had holes company was slow to fix

PHP2Shell: No login, no app code, no warning. What ?

PARTNER CONTENT: Learn what the flaws are, how far exploitation has gone, and how to get to full coverage fast with Tanium

Humanity can't afford not to spend $800B on AI, Anthropic insists

It's more important than chips, 'leccy and the net, after all

PHP2Shell is a warning shot for vulnerability disclosure

Keeping secrets is difficult in an open world, but we've done it before and must do it again

OpenAI rolls out budget-priced mid-tier GPT-6.1 Terra

Not a bombshell, but it rivals pricier models on some tasks at a tenth of Astra's API price

Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’

OpenClaw creator says he spent $10 million in tokens last month

PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

PHP2Shell exploit bypasses protections designed to stop remote code execution

Google Cloud's London zones takes a nap, multiple services disrupted

Humanity can't afford not to spend $800B on AI, Anthropic insists It's more important than chips, 'leccy and the net, after all

Humanity can't afford not to spend $800B on AI, Anthropic insists

It's more important than chips, 'leccy and the net, after all

OpenAI rolls out budget-priced mid-tier GPT-6.1 Terra Not a bombshell, but it rivals pricier models on some tasks at a tenth of Astra's API price

OpenAI rolls out budget-priced mid-tier GPT-6.1 Terra

Not a bombshell, but it rivals pricier models on some tasks at a tenth of Astra's API price

's r/opensource bans AI slop, and quite a few humans for good measure New rules also shut out solo developers, fledgling projects, and anyone who doesn't speak English

's r/opensource bans AI slop, and quite a few humans for good measure

New rules also shut out solo developers, fledgling projects, and anyone who doesn't speak English

Private equity giant: AI payoff strictly limited to Big Tech The Magnificent Seven are galloping off with the profits, while the rest of the S&P 500 see no benefit, claims Apollo

Private equity giant: AI payoff strictly limited to Big Tech

The Magnificent Seven are galloping off with the profits, while the rest of the S&P 500 see no benefit, claims Apollo

EXCLUSIVE Former Intel CEO Pat Gelsinger bets on Nagare Labs to vault the memory wall SRAM-like bandwidth, DRAM-like density, and NAND-like manufacturing: Z2RAM makes big promises, but the road ahead is arduous and littered with the ruins of failed memory vendors

Former Intel CEO Pat Gelsinger bets on Nagare Labs to vault the memory wall

SRAM-like bandwidth, DRAM-like density, and NAND-like manufacturing: Z2RAM makes big promises, but the road ahead is arduous and littered with the ruins of failed memory vendors

Security Russians are posing as Signal support to launch phishing attacks PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!

Russians are posing as Signal support to launch phishing attacks

PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!

Security Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more

Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack

PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more

Black Hat and DEF CON DEF CON Franklin project enlists hackers to harden critical infrastructure Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included

Black Hat and DEF CON

DEF CON Franklin project enlists hackers to harden critical infrastructure

Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included

Security EQT buys majority in Swiss cybersecurity biz Acronis Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified

EQT buys majority in Swiss cybersecurity biz Acronis

Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified

Malware Month Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight On the plus side, infosec's a good bet for a long, stable career

Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight

On the plus side, infosec's a good bet for a long, stable career

SparkyOS: Lightweight general-purpose Arch, on a pendrive Interesting new project from the minds behind SparkyLinux

SparkyOS: Lightweight general-purpose Arch, on a pendrive

Interesting new project from the minds behind SparkyLinux

Red Hat helps teach tech writing But learns tough lessons AI in the process

Red Hat helps teach tech writing

But learns tough lessons AI in the process

NetBSD may have found a new role: The AI-free FOSS OS Increasing awareness and adoption, followed by increasing donations

NetBSD may have found a new role: The AI-free FOSS OS

Increasing awareness and adoption, followed by increasing donations

OpenAI dots inspire open source imitators amid technical difficulties Persistent agents appeal to AI companies, but demand isn't obvious

OpenAI dots inspire open source imitators amid technical difficulties

Persistent agents appeal to AI companies, but demand isn't obvious

Ubuntu 'Stonking Stingray' beta swims out: Deeper Rust 'oxidization' plus LLM speech-to-text GNOME 51 is here, and Ubuntu interim releases are getting interesting again

Ubuntu 'Stonking Stingray' beta swims out: Deeper Rust 'oxidization' plus LLM speech-to-text

GNOME 51 is here, and Ubuntu interim releases are getting interesting again

Revive Raskin's 3 laws of software with humane work that considers a dev's duty of care All this, and angry NeoVim users

Revive Raskin's 3 laws of software with humane work that considers a dev's duty of care

All this, and angry NeoVim users

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PHP2Shell Exploit Bypasses Protections, Affects Multiple Systems A critical vulnerability known as PHP2Shell has been reported, allowing remote code execution without authentication. This exploit has been linked to multiple systems, including PHP applications, where it can bypass existing protections. The vulnerability is notable for its ease of exploitation, as it requires no login or application code. Security experts are urging site owners to take immediate action by applying critical patches and taking systems offline if. The exploit has been described as a significant warning shot for vulnerability disclosure practices. Affected systems include those relying on PHP, with developers advised to implement the latest fixes. The situation is compounded by the ongoing threat landscape, where similar vulnerabilities have been. As of now, the exploit is actively being reported and investigated by cybersecurity professionals. 6 sources 73

Extracted Entities

Worm armed 42 GitHub repos by hiding a payload too big to fail

The full story

Extracted Entities

Attack Types (2)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)