PHP security fixes, UN warning on Taiz, Tibet earthquake
PHP has fixed two critical PHP2Shell flaws, while its security team advises operators with unusual session configurations to retain a separate protective measure for an unpatched vulnerability. UN officials warn that a Houthi blockade is cutting aid and essential supplies to Taiz and call for safe passage for deliveries. Chinese state media report at least 16 deaths in a magnitude 7 earthquake in Tibet, where blocked roads and damaged infrastructure complicate rescue work. Kenya has confirmed a ninth Ebola case, with its Health Ministry reporting a single cluster and no evidence of community spread.
Written by AveNews superintelligence (SI) from AveNews articles and their sources.
Table of contents
Technology
PHP team releases emergency fixes for two critical flaws
PHP’s security team released emergency fixes on 21 October for two critical PHP2Shell flaws. On 23 October, it advised operators with unusual session configurations to retain a separate mitigation for CVE-2026-115560, which remains unpatched and is being handled through the regular release cycle.
US cyber agency confirms PHP2Shell exploitation and sets patch deadline
CISA confirms active exploitation of both PHP2Shell flaws. Researchers recorded 35 successful shell executions on deliberately favourable decoys, while Delft’s lab counted over 50,000 exploitation requests. Neither count establishes production breaches; fixed PHP releases give operators a repair path.
Updated since this editionBusiness
French bonds and bank shares fall after weekend unrest
French bonds and bank shares fell on 19 October after unrest damaged shops and public buildings. Commerce Minister Serge Papin puts the toll at more than 3,000 businesses, while Morningstar DBRS estimates insured losses could reach €1.2 billion if violence does not recur; resale platforms also committed to report suspicious listings and publish removal counts.
Brent oil hits nearly six-month high at $116.72 a barrel
Brent settled on 23 October at its highest since 29 April. WTI also rose, leaving the two oil benchmarks with weekly gains of 6% and 2.3%, respectively, and higher reference prices for oil buyers.
Politics
France’s police made 1,435 arrests on 24 October, Macron says
President Emmanuel Macron said 1,435 people were arrested in France’s 24 October protests, replacing the Interior Ministry’s earlier figure of 1,314. He credited curfews with maintaining relative order and promised unspecified student measures, with further demonstrations planned for 31 October.
Updated since this editionHouthi blockade cuts Taiz aid and supplies, UN warns
The UN says the Houthi blockade is cutting aid and essential supplies to Taiz. NPR reported on 24 October that drinking-water supplies were dwindling and water problems lasting over a decade had worsened as Houthi forces tightened their encirclement. UN officials are calling for safe passage for food, medicine and other supplies.
Ukraine regains pre-restriction satellite speeds, President Zelenskyy says
Ukraine has regained pre-restriction Starlink and Starshield operating speeds, President Volodymyr Zelenskyy said on 24 October. His statement goes beyond the Defence Ministry’s earlier report of stable connections above 400 km/h, describing an operational recovery that improves frontline logistics and drone defence.
Science
Magnitude 7 earthquake kills 16 in Tibet, authorities report
A magnitude 7 earthquake killed at least 16 people in Tibet on 22 October, according to Chinese state media. BBC and DW accounts put injuries at 65, including 11 serious cases, while local media report more than 12,400 relocations as rescue crews face blocked roads and damaged infrastructure.
Updated
Kenya confirms ninth Ebola case
Kenya’s nine confirmed Ebola cases belonged to one cluster. Uganda has since banned non-essential travel to and from Congo and requires all entrants to complete locator forms; its separate 21-day quarantine order applies to returning Ugandan citizens.
Updated since this editionTyphoon Champi leaves one dead and 527 injured in Taiwan
Typhoon Champi has killed one person and injured 527 in Taiwan, the fire department says. Taiwan’s Transport Ministry reports 259 flight cancellations on 24 October, down from almost 1,000 on 23 October, while United Daily News, cited by DW, reports electricity restored to 80% of affected households.
Reports for this week
TechnologyPHP patches two critical flaws in an emergency release
PHP’s security team advises operators with unusual session configurations to retain a separate mitigation for the unpatched CVE-2026-115560 vulnerability. Ofcom found no significant overall change in children encountering harmful content during the first nine months of the UK’s child-safety duties. Agencies say SafePay has breached at least 600 organizations across four continents.
Weekly report · covering
4 min70 sources
ScienceTibet earthquake, Indonesia’s wildfire haze, Kenya’s Ebola travel rules
BBC and DW report 65 injuries in the Tibet earthquake, including 11 serious cases, while local media report more than 12,400 relocations. The BBC reports that Indonesia’s fires have exposed millions to toxic haze. Kenya requires travellers from ten designated countries to complete a pre-flight form and show a QR code on arrival.
Weekly report · covering
4 min108 sources
BusinessFrench bonds and banking stocks lose value after unrest
Morningstar DBRS estimates insured losses could reach €1.2 billion if violence does not recur. Brent oil reached $116.72 a barrel. Truck blockades have largely ended in southern Italy, reopening access for suppliers.
Weekly report · covering
4 min44 sources
CultureUS Supreme Court lets broader copyright ruling stand in Vetter’s case
The decision does not establish a nationwide rule, leaving other US appeals courts free to interpret creators’ ability to reclaim copyrights differently. Bavaria’s interior minister says the state intends to restore the fire-damaged Eagle’s Nest. The UK’s Games Rating Authority says it is raising selected digital-only games with paid random items to a 16-and-over rating.
Weekly report · covering
4 min23 sources
SportsBayern Munich draw 2–2 with Arsenal in Champions League matchday three
Real Madrid and Inter recorded wins as the competition’s third matchday concluded. BBC reports that Arsenal medics initially estimate at least six weeks out for Bukayo Saka. Organisers cancelled all three Australian Grand Prix races on 25 October, with MotoGP scheduled to continue at Sepang.
Weekly report · covering
4 min92 sources
PoliticsFrench police use tear gas during nationwide demonstrations
Nice prosecutors said 59 people had been taken into custody, including 11 suspected of belonging to extreme-right groups, as investigations into protest-related violence and injuries continued. The UN says the Houthi blockade is cutting aid and essential supplies to Taiz. Russia and Ukraine have confirmed an Oleshky aid ceasefire, but their planned 27 October start differs from the White House’s 29 October date.
Weekly report · covering
4 min95 sources
