TECH NEWS

426 Android and iOS Apps Linked to PHP2Shell Backend Risks

Research found 426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns about backend security.

NowSecure has identified 426 Android and iOS apps connecting to servers that report versions of PHP (Hypertext Preprocessor), a programming language used to build websites and backend services, affected by the recently patched PHP2Shell vulnerabilities.

In research shared with Hackread.com, the cybersecurity firm urged developers to check the servers supporting their apps, including those operated by outside providers. The reported versions alone do not confirm whether a server remains unpatched or can be exploited.

PHP2Shell Flaws Raise Backend Security Concerns

The PHP project released fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, on October 21, 2026, each rated CVSS v4.0 9.2. Hackread.com reported on the emergency PHP2Shell fixes, which address flaws that can allow unauthenticated attackers to execute code on affected servers.

For context, both PHP2Shell vulnerabilities were...

Copyright of this story solely belongs to hackread.com. To see the full text click HERE

https://cdn.mos.cms.futurecdn.net/RUyYKopfxTPNGFEJTvqWBk-1366-80.jpg

PHP security issues could also threaten your NAS device — but not every vendor is able to patch just yet

* Critical PHP2Shell flaws also impact internet-exposed NAS devices and PHP-based Docker workloads * Major vendors are still releasing patches, leaving some Synology, QNAP, and other systems exposed * Researchers urge immediate updates, removal of public exposure, and VPN-only remote access Websites and web servers are apparently not the only products affected by

https://techcrunch.com/wp-content/uploads/2026/10/CFS-Brandon-Sorbom-Disrupt-2026.jpg?resize=1200,800

Commonwealth Fusion Systems gets $85M to build better fusion-ready semiconductors

Commonwealth Fusion Systems (CFS) announced on Thursday that it would receive $85 million from the U.S. government to develop advanced chips for the fusion power industry. Fusion power startups have been racing to complete their first demonstration devices, with CFS aiming to turn on its Sparc reactor sometime next

Meta Is Charging Government And Nonprofit Pages To Post Links On Facebook

The new restrictions are a test which is explicitly not supposed to impact these entities. Screenshot (Meta) Daniel Starks is the communications manager for Greenville, Texas, a city of about 35,000. He oversees nearly a dozen Facebook pages the city maintains. Recently, the page for the city's

https://media.wired.com/photos/6adb5fd2c971dd84b8dc4ea5/191:100/w_1280,c_limit/GettyImages-2246892016.jpg

Elon Musk Just Dumped Another $76 Million Into the Midterms

Elon Musk gave his personal political committee, America PAC, more than $76 million in the first two weeks of October to boost Republicans in the final stretch of the midterms, according to a pre-election report the PAC filed Thursday evening with the Federal Election Commission. The group spent nearly $43

PHP2Shell Flaws Raise Backend Security Concerns

Read more

PHP security issues could also threaten your NAS device — but not every vendor is able to patch just yet

Commonwealth Fusion Systems gets $85M to build better fusion-ready semiconductors

Meta Is Charging Government And Nonprofit Pages To Post Links On Facebook

Elon Musk Just Dumped Another $76 Million Into the Midterms