Techmeme
October 21, 2026, 2:00 PM

Top News

PHP:
PHP releases security fixes for two critical unauthenticated RCE vulnerabilities, affecting all web request-serving installations, and urges PHP users to update  —  PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution.
More: PHP, National Cyber Security Centre, CERT-EU, Node.js, GitHub, Reuters, watchTowr, The Register, CISA, NBC News, BleepingComputer, GitHub, PHP, Decrypt, PCMag, Inc, Help Net Security, Securelist, VirusTotal Blog, CryptoSlate, SecurityWeek, TidBITS, Cyber Security News, Tenable Blog, Linuxiac, Search Engine Roundtable, The Hacker News, eSecurity Planet, ITPro, Bloomberg, Help Net Security, The Stack, Infosecurity, Security Affairs, Bloomberg, and Cyber Security News
LinkedIn: Alon Noy, Deanna Murphy, and Camran K.
OpenAI:
Cloudflare:
Cloudflare says it deployed WAF mitigations for all free and paid tier customers to combat two PHP flaws by default, about nine hours ahead of public disclosure  —  Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell.
Robert McMillan / Wall Street Journal:
PHP's creators disclose a critical memory-management vulnerability, dubbed “PHP2Shell”, that affects up to 70% of websites, discovered via GPT-5.6 Sol in August  —  AI tools helped find one of the most severe online bugs ever.  Cyber experts are racing to patch it before hackers use AI to exploit it.
Reuters:
Several government, school, and hospital websites in Europe were taken offline as organizations rush to protect themselves from two critical PHP security flaws  —  Several government, school and hospital websites in Europe were taken offline on Wednesday as organizations rushed to protect themselves …
The PHP Foundation:
The PHP Foundation details how it found and fixed the two flaws, and says it had to release patches a day early after the two CVE IDs began circulating online  —  Earlier today, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35.  These releases fix two critical vulnerabilities that …
More: The Record, Gizmodo, and Associated Press
X: @thephpf.  Bluesky: @lookitup.baby.  Forums: Hacker News and r/PHP
The Verge:
iPhone Duo review: a fun device with a cool matte inner display, but the cover display is too small, it is heavy and bulky, the cameras are OK, and it gets hot  —  The iPhone Duo is the riskiest Apple product in years.  It's a huge rethink of what an iPhone is and could be …
Julian Chokkattu / Wired:
Charlotte Trueman / DatacenterDynamics:
Nvidia unveils the DSX POD, a modular containerized version of its Vera Rubin reference architecture to cut data center deployment from six months to 14 days  —  Details released at GTC Berlin event, taking place this week  —  Nvidia has claimed its DSX reference architecture for AI data centers …
Thomas Claburn / The Register:
Bloomberg:
Jordan Novet / CNBC:
OpenAI says it will make its AI models available on Google Cloud's model garden and Antigravity coding tool in the coming weeks, after launching on AWS in April  —  OpenAI will make its artificial intelligence models available for developers through Google's cloud, following years of competition between the two companies.
OpenAI:
OpenAI says two agents, one GPT-6.1 Sol and one GPT-6 Astra, weakened misalignment monitoring while making requested changes during two internal coding tasks  —  GPT-6.1 Sol and GPT-6 Astra  · Internal deployments  —  Discovered: Oct 3, 2026 (Sol); Oct 6, 2026 (Astra)  —  Summary
Jason Schreier / Bloomberg:
Source and leaked memo: EA plans to cut ~400 jobs, or ~3% of its total staff, and shut down BioWare; EA went private in August following a $55B leveraged buyout  —  The next ‘Mass Effect’ will be canceled as part of the layoffs  —  Electronic Arts Inc. said it will lay off staff and shut down BioWare …
Jonathan Vanian / CNBC:
A New Mexico court orders Meta to pay $25B in penalties after a jury found Meta misled residents about its data practices in the Cambridge Analytica scandal  —  Meta was ordered to pay $25 billion in penalties by a New Mexico court on Wednesday as part of a data privacy case that stemmed …
Will Knight / Wired:
Recursive releases Flint, an open-weight, 40B-parameter coding model developed with its Eureka Machine AI system, which automated most of the development  —  Recursive makes the case that the benefits of using AI to build AI outweigh the risks.  —  For the past few days I've been testing …
Anthropic:
Dario Amodei / @darioamodei:
Dario Amodei says Anthropic's “race to the top” makes AI safer, cites nine safety decisions with “substantial costs”, and admits mishandling a draft AI bill  —  Thank you for this, @_NathanCalvin. I appreciate and am a fan of the investigative work you've done on behalf of AI safety and believe your comments are coming from a constructive, honest place, and that it benefits the public to have people whose job is to scrutinize the actions of frontier AI com...
Dan Goodin / Ars Technica:
Eight intermediate TLS certificates from eMudhra with private key sizes of just 3 to 8 bits were compromised; browser makers and major apps have blocked them  —  Security personnel around the world are on high alert Tuesday following the discovery of eight TLS certificates with private keys …
Andrew J. Hawkins / The Verge:
Natasha Mascarenhas / Bloomberg:
Whop, which helps people start, run, and scale businesses and uses AI to suggest business decisions, raised $205M led by Sequoia Capital at a $5.1B valuation  —  “Rule one of making money is go where they ain't.”  That's how famed investor Doug Leone, who used to run venture firm Sequoia Capital …
Rachel Metz / Bloomberg:
Flapping Airplanes, which is working on methods to train AI models on less data and compute and make the chips more efficient, raised $1B at a $6B valuation  —  Flapping Airplanes, a year-old artificial intelligence startup, has raised $1 billion in funding at a $6 billion valuation …
Rafe Rosner-Uddin / Financial Times:
OpenEvidence says nearly two-thirds of the US' ~1M physicians use its AI search engine; a source says it is on track to generate $400M-$500M in 2026 ad revenue  —  Founder of OpenEvidence chatbot says two-thirds of US physicians use the ad-powered tool, prompting a debate about patient care
More: Ars Technica
Rosie Harris-Davison / City A.M.:
Stockholm-based legal AI startup Legora raised a $550M Series E at an $8.8B post-money valuation led by Atreides, up from $5.55B after a $550M Series D in March  —  Legal tech firm Legora has raised $550m (£410m) in Series E funding as it expands its footprint in the US, Europe, and the Asia-Pacific region.

Sponsor Posts

Command Line:
Copilot to autopilot: Why no single safeguard is enough  —  Microsoft designed a layered model that lets an AI agent resolve network incidents on its own within defined boundaries.
Will Reed:
The best sales leaders aren't job hunting.  Here's how to reach them without months of cold outreach.  —  Our team came from Box, Square, and Brex, so we already know the GTM leaders worth meeting.
Zoho:
Diwali 2026: Your festive planning checklist with Zoho Notebook  —  The Diwali countdown is on!  From lighting up every corner of the house to going a little overboard with the festive shopping …
IDrive:
Protecting your Cloud Applications Data  —  Backing up Office 365, Google Workspace, Dropbox & Salesforce data is critical to preventing data loss or corruption, complying with laws and avoiding critical downtime in case of a disaster.

Featured Podcasts

Great Chat:
AI's Spooky Season
A podcast mostly about tech. Brought to you weekly by Angela Du, Sally Shin, Mac Bohannon, Helen Min, and Ashley Mayer.
Subscribe to Great Chat.
Sources:
Sundar Pichai on Gemini 4 and the AI compute crunch
Candid conversations with the leaders shaping what's next in AI and the broader tech industry. Hosted by Alex Heath, who has covered Silicon Valley for more than a decade.
Subscribe to Sources.
Channels with Peter Kafka:
Netflix in Turmoil + Derek Thompson on AI & The Antisocial Century
Media and tech aren't just intersecting - they're fully intertwined. To understand how those worlds work, Peter Kafka talks to industry leaders, upstarts and observers.
Subscribe to Channels with Peter Kafka.
Big Technology Podcast:
Google CEO Sundar Pichai: AI's Infinite Possibilities, Compute Scarcity Dilemmas, Future AI Products
The Big Technology Podcast takes you behind the scenes in the tech world featuring interviews with plugged-in insiders and outside agitators.
Subscribe to Big Technology Podcast.
Cheeky Pint:
How Toto Wolff built the most valuable team in F1
Stripe cofounder John Collison interviews founders, builders, and leaders over a pint.
Subscribe to Cheeky Pint.
Training Data:
Inside the Robot Data Factory: Mecka's Josh Gao on Sensorizing Humans to Train Robots
Sequoia Capital partners host conversations with leading AI builders and researchers to develop a deeper understanding of the evolving technologies and their implications.
Subscribe to Training Data.
 

About This Page

This is a Techmeme archive page. It shows how the site appeared at 2:00 PM ET, October 21, 2026.

The most current version of the site as always is available at our home page. To view an earlier snapshot click here and then modify the date indicated.

More News

Beatrice Nolan / Fortune:

Earlier Picks

Wall Street Journal:
Anissa Gardizy / Wall Street Journal: