Story no.33OngoingCyberNotable23 Oct → 31 Oct47 facts · 134 art.

CERT-FR publishes a series of advisories on critical vulnerabilities

On October 29, 2026, CERT-FR publishes an advisory on a critical flaw in SPIP allowing remote takeover of affected equipment. The same day, researchers reveal critical flaws in PHP, after government websites, including French ones, were taken offline the previous week. On October 30, CERT-FR publishes several advisories reporting vulnerabilities in Apple products, MongoDB, Tenable Nessus, Veeam, GitLab, Suricata, Stormshield, Red Hat and SUSE Linux kernels, and IBM products. It also warns of Apple phones being targeted by spyware, indicating it is aware of notifications sent by Apple on October 29 to targeted users. On October 31, after the publication of the critical PHP flaws, companies rethink their cyber defence and bet on AI in the face of automated cyberattacks.

In brief

Ongoing story bringing together 47 events nationwide, followed from 23 October 2026 to 31 October 2026. 134 articles from 8 sources (cyber); last updated on 31 October 2026 at 13:00.

Who is covering it, and from what angle

Method

1Left25 %

2Centre50 %

1Right25 %

4 articles of rated outlets · 130 unrated outside the bar · 8 sources (134 art.) · the three sides talk about it · outlets: left 1, centre 2, right 1

Angle comparison for the whole story

The centre covers the event from the angle of alert and pedagogy (PHP flaws, Anssi instructions), while the right highlights the response of companies and the use of AI as a new defence strategy.

Left

No coverage from this side.

Centre

Highlights the discovery of the PHP flaws, the taking offline of government websites and the Anssi's warnings on secondary impacts and the need for updates.

Right

Emphasis on the response of companies, presented as a paradigm shift where AI becomes the defence weapon against automated attacks.

Written by an AI from headlines and extracts only of all events in the story · 31 Oct, 11h39

Timeline

newest first

Outlets:LeftCentreRightUncategorised· badge = severity

10h00
LatestL'IA, nouvelle arme des entreprises face aux cyberattaques automatisées
Après la publication de failles critiques PHP, les entreprises repensent leur cyberdéfense et misent sur l'IA pour contrer des attaques elles-mêmes dopées à l'intelligence artificielle.
L'OpinionCentre-right

In figures

The activity

47 faits

Latest activity 1 hour ago

3 4 3 10 14 12 1

23 Oct31 Oct

Affected departments

National

Reported toll

No numeric assessment in the articles.

CERT-FR publishes a series of advisories on critical vulnerabilities

Who is covering it, and from what angle

Timeline

In figures

Further reading