PwC Confirms Third-Party Cybersecurity Incident After Everest Claims 590GB Data Theft
On October 22, 2026, the Everest cyber-extortion group claimed it had stolen approximately 590 GB of data from PwC, the global professional-services network. PwC confirmed a cybersecurity incident…
Critical PHP2Shell Vulnerabilities Exploited in the Wild Before Emergency Patches
On October 21, 2026, the PHP development team released emergency security updates for two critical vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively known as PHP2Shell….