Two critical PHP flaws allow unauthenticated attacks on business websites and online shops. Ask your IT or hosting provider to verify the PHP version and investigate activity since 17 October 2026.

ConnectWise has confirmed unauthorised access to Cloud Backup (SkyKick) application identities. Affected Microsoft 365 tenants now require review and log preservation.

A critical flaw in Nextcloud’s optional Collabora Online – Built-in CODE Server app is being actively exploited. Affected organisations should request an immediate update and compromise assessment.