Story no.33OngoingCyberNotable23 Oct → 2 Nov48 facts · 143 art.
Critical PHP flaws and CERT-FR alerts on vulnerabilities
On October 29, 2026, researchers discovered critical flaws in the PHP language, causing government websites to be taken offline the previous week, including French sites. On October 30, CERT-FR published a series of advisories on multiple vulnerabilities affecting notably MongoDB, Apple, Tenable Nessus, Veeam, GitLab, Suricata, Stormshield, Red Hat and SUSE Linux kernels, as well as IBM products. The same day, CERT-FR warned about the targeting of Apple phones by spyware, after notifications sent by Apple on October 29 to targeted users. On October 31, companies were described as rethinking their cyber defense and betting on AI against automated attacks after these PHP flaws. On November 2, CERT-FR published an advisory on vulnerabilities in Microsoft Edge.
In brief
Ongoing story bringing together 48 events nationwide, followed from 23 October 2026 to 2 November 2026. 143 articles from 8 sources (cyber); last updated on 2 November 2026 at 01:00.
4 articles of rated outlets · 139 unrated outside the bar · 8 sources (143 art.) · the three sides talk about it · outlets: left 1, centre 2, right 1
Angle comparison for the whole story
The three sides cover the same critical flaws (PHP, SPIP) and their consequences, but differ in angle: crisis narrative and behind-the-scenes on the left, educational explanation and institutional alerts in the center, focus on corporate strategic response and AI on the right.
Left
Highlights the narrative of a crisis experienced as collective panic, with public websites taken offline (taxes, prefectures), behind-the-scenes and malfunctions, and the role of AI in discovering the flaws.
Centre
Privileges in-depth explanation (vulnerability of a language used by a large share of websites) and relays ANSSI warnings on secondary impacts and the need for updates.
Right
Insists on corporate reaction, the overhaul of their cyber defense, and the use of AI as a response to automated attacks, presented as a paradigm shift.
Written by an AI from headlines and extracts only of all events in the story · 31 Oct, 15h38
Timeline
newest firstOutlets:LeftCentreRightUncategorised· badge = severity
In figures
Further reading
Go up the thread
Events in the story
- Le CERT-FR publie un avis sur des vulnérabilités dans Microsoft Edge2 Nov
- La faille critique PHP continue de secouer l'Internet mondial31 Oct
- L'IA, nouvelle arme des entreprises face aux cyberattaques automatisées31 Oct
- Le CERT-FR alerte sur le ciblage de téléphones Apple par des logiciels espions30 Oct
- Le CERT-FR publie un avis sur des vulnérabilités dans les produits IBM30 Oct
- Le CERT-FR publie un avis sur des vulnérabilités dans le noyau Linux de SUSE30 Oct
- Le CERT-FR publie un avis sur des vulnérabilités dans le noyau Linux de Red Hat30 Oct
- Le CERT-FR publie un avis sur des vulnérabilités dans les produits MongoDB30 Oct
- Le CERT-FR publie un avis sur une vulnérabilité dans Stormshield Management Center30 Oct
- Le CERT-FR publie un avis sur des vulnérabilités dans Suricata30 Oct