Apple launched iOS 27.2 and iPadOS 27.2 on October 26, 2026, fixing 163 security flaws. The update is for iPhone 11 and newer, along with many iPad models. The biggest issues are in WebKit, which powers Safari and most browsers in Apple apps. Apple warns that harmful web content might …

CISA has updated a new alert to reflect the addition of CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities (KEV) Catalog on Oct. 26, 2026. CISA urges organizations to quickly fix the recently found serious flaws in PHP, CVE-2026-109618 and CVE-2026-109619. These flaws, called “php2shell,” let remote code run in …

Cloudflare has shared an urgent update to its Web Application Firewall (WAF) rules due to CVE-2026-111497, a Brotli issue. The release on October 25, 2026 adds two rules for Brotli-encoded request bodies and the Next.js image optimization endpoint. These are turned on by default in Log mode so that it can …