Show notes
A decade-old flaw in PHP flips from “too hard to exploit” into a real-world remote code execution chain once frontier AI enters the picture. We break down how the memory bugs work, why the blast radius hits everything from WordPress to Magento, and what practical steps to take when attackers move at machine speed. • how CVE-2026-109618 and CVE-2026-109619 chain together through out-of-memory corruption and stale state use after free • why this is a five-alarm fire for modern web ...
