BlockSpamHow to use
en▾
Sign inSign up

BlockSpam · Relcom

Publications

Investigation practice, security news and platform knowledge.

Blog

PHP2Shell: AI found a PHP vulnerability that sat unnoticed for more than ten years. What site owners should do

On 21 October 2026, PHP released emergency updates 8.5.12, 8.4.27, 8.3.36 and 8.2.35. They fix two critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated code execution on a server. Researchers from Wiz, Calif and OpenAI found the flaws with the help of AI. Details leaked before the release, and exploitation attempts are already under way. Site owners need to update PHP itself, not WordPress or plugins.

BlockSpam

Industry news

Cloudflare adds SQL log transformations to Logpush before export

According to Cloudflare, the Transformers feature in Logpush is now generally available. It lets users filter records, redact sensitive data and reshape fields with SQL before logs are sent to SIEMs, analytics platforms and storage[^1].

BlockSpam

Industry news

Canonical websites hit by another DDoS attack

On October 8, Canonical confirmed a sustained DDoS attack on its websites[^1]. According to OMG! Ubuntu, downtime lasted a little over four hours, and Launchpad and the Snap Store did not appear to be affected[^1].

BlockSpam

Industry news

SailPoint report: identity security for AI agents lags behind their adoption

A partner piece published by The Hacker News on 9 October 2026 summarises SailPoint's "Horizons of Identity Security" report. According to the company, 54% of organisations sit at the lowest maturity level for AI agent identity security, compared with 23% for employee identities[^1].

BlockSpam

Blog

A name only its owner can vouch for

What the hijacking of three national domain registries reveals, and how blockchain-held names with owner-published keys close the gap

lopux.net · Reliable Communications s.r.o.