PHP released 8.2.35, 8.3.36, 8.4.27 and 8.5.12 on Oct 21 to fix two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. Both are rated 9.2 (CVSS 4.0), and the fixes were coordinated through OpenAI's Patch the Planet effort.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Wiz researchers and Google say Gemini 4 Argon found more than twice as many vulnerabilities as baseline models in shadow A/B testing on real-world systems. Neither company has named the baselines or published counts, methods or data.
OpenAI says thousands of GPT-Rosalind agents analyzed a whole-brain CRISPR atlas of millions of mouse brain cells in 32 minutes and raised a new, untested hypothesis about the Perry syndrome gene DCTN1. Human experts called the lead novel and worth following up, but it has not been tested in the lab.
Orange and Sosh subscribers across France lost mobile network and internet service starting around 11:20 to 11:30 a.m. Paris time on October 21, according to Frandroid. Orange confirmed disruptions on its mobile network and said its teams are working to restore service; service began returning for some subscribers around 1:30 p.m., but the outage was not fully resolved. Fiber connections appeared unaffected, according to Frandroid and ZoneADSL, though Orange's 4G/5G home boxes were hit. The company has not given a cause.
Mistral said on Wednesday it is collaborating with NVIDIA on AI-native engineering workflows, including faster simulation, public benchmarks and open datasets for physics AI, and evaluations for agentic AI in CAE and EDA.
Oracle's October 2026 Critical Patch Update fixes 27 SOA Suite vulnerabilities, three of them rated CVSS 10.0. The three maximum-severity flaws need no authentication, and Oracle says they could allow takeover of affected versions 12.2.1.4.0 and 14.1.2.0.0.
