# PHP2Shell Security Flaws Now Successfully Exploited
robot (spnet, 1) → All – 23:22:02 2026-10-26
The critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been successfully exploited in the wild, just days after patches were released and initial exploitation attempts failed. BleepingComputer reports: The malicious activity was caught by Adel Karimi, detection and response lead at Perplexity, whose honeypots recorded evidence of confirmed remote code execution against an Apache mod_php installation running PHP 8.4.26. "This is now confirmed RCE with usable memory disclosure, not just a crash followed by a suspicious process. The response delivered an 800 KiB decoded cookie dump, and a function address derived from that dump using the public exploit's offsets appears in the subsequent execution payload," Karimi shared.
"The evidence demonstrates this chain on the intentionally favorable single-worker mod_php profile; it is not a measurement of exploit reliability on other worker counts, PHP builds, or applications," he added. Karimi's findings were also confirmed by Expel threat researcher Marcus Hutchins, who has been tracking a stream of alleged successful PHP2Shell exploitation reports.
"This is by far the highest quality confirmation of in-the-wild php2shell exploitation I've seen so far. Deep technical breakdown of a successful exploitation attempt against an Apache mod_php installation running PHP 8.4.26," Hutchins said.
[ Read more of this story ]( https://yro.slashdot.org/story/26/10/26/2150206/php2shell-security-flaws-now-successfully-exploited?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
robot (spnet, 1) → All – 23:22:02 2026-10-26
The critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been successfully exploited in the wild, just days after patches were released and initial exploitation attempts failed. BleepingComputer reports: The malicious activity was caught by Adel Karimi, detection and response lead at Perplexity, whose honeypots recorded evidence of confirmed remote code execution against an Apache mod_php installation running PHP 8.4.26. "This is now confirmed RCE with usable memory disclosure, not just a crash followed by a suspicious process. The response delivered an 800 KiB decoded cookie dump, and a function address derived from that dump using the public exploit's offsets appears in the subsequent execution payload," Karimi shared.
"The evidence demonstrates this chain on the intentionally favorable single-worker mod_php profile; it is not a measurement of exploit reliability on other worker counts, PHP builds, or applications," he added. Karimi's findings were also confirmed by Expel threat researcher Marcus Hutchins, who has been tracking a stream of alleged successful PHP2Shell exploitation reports.
"This is by far the highest quality confirmation of in-the-wild php2shell exploitation I've seen so far. Deep technical breakdown of a successful exploitation attempt against an Apache mod_php installation running PHP 8.4.26," Hutchins said.
[ Read more of this story ]( https://yro.slashdot.org/story/26/10/26/2150206/php2shell-security-flaws-now-successfully-exploited?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
# Skydance Offers Buyouts, Gives 5-Day RTO Order
robot (spnet, 1) → All – 22:22:01 2026-10-26
Skydance, as it begins integrating Paramount and Warner Bros. Discovery, is offering voluntary buyouts to some employees and imposing a five-day-a-week office requirement. Layoffs are also expected as the company targets more than $6 billion in annualized cost savings within three years. Variety reports: The new program was outlined by chairman and CEO David Ellison and co-CEO Ynon Kreiz in a memo to staffers Monday. "As we bring our teams together, we recognize that not everyone will see their future here, and we respect that. To give eligible employees the option to move on in a way that works for them, we are introducing a Voluntary Buyout (VBO) Program," the execs wrote. "Those who qualify will receive an individual communication with their personalized details and terms, and a window to decide whether to accept this one-time offer."
They added, "Please know we don't take any of this lightly. We are clear about what we're building: a company that tells the stories people around the world love, embraces new ways to connect with audiences, and leads the next era of media and entertainment. We have the talent, the creative firepower and the ambition to do it, and we will get there together."
[...] In the Oct. 26 memo, Ellison and Kreiz also said the new Skydance is moving to a mandatory five-days-per-week in-office policy across the company. "We believe in-person collaboration is vital to our culture and to the success of our business. Especially in a creative company like ours, the best ideas come from people in the same room, sharing perspectives, challenging one another and solving problems," the execs said. "We truly believe this is in the best interest of our company and our people. We've seen the benefits firsthand at Paramount, and we want every part of Skydance to share in them."
[ Read more of this story ]( https://slashdot.org/story/26/10/26/2128235/skydance-offers-buyouts-gives-5-day-rto-order?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
robot (spnet, 1) → All – 22:22:01 2026-10-26
Skydance, as it begins integrating Paramount and Warner Bros. Discovery, is offering voluntary buyouts to some employees and imposing a five-day-a-week office requirement. Layoffs are also expected as the company targets more than $6 billion in annualized cost savings within three years. Variety reports: The new program was outlined by chairman and CEO David Ellison and co-CEO Ynon Kreiz in a memo to staffers Monday. "As we bring our teams together, we recognize that not everyone will see their future here, and we respect that. To give eligible employees the option to move on in a way that works for them, we are introducing a Voluntary Buyout (VBO) Program," the execs wrote. "Those who qualify will receive an individual communication with their personalized details and terms, and a window to decide whether to accept this one-time offer."
They added, "Please know we don't take any of this lightly. We are clear about what we're building: a company that tells the stories people around the world love, embraces new ways to connect with audiences, and leads the next era of media and entertainment. We have the talent, the creative firepower and the ambition to do it, and we will get there together."
[...] In the Oct. 26 memo, Ellison and Kreiz also said the new Skydance is moving to a mandatory five-days-per-week in-office policy across the company. "We believe in-person collaboration is vital to our culture and to the success of our business. Especially in a creative company like ours, the best ideas come from people in the same room, sharing perspectives, challenging one another and solving problems," the execs said. "We truly believe this is in the best interest of our company and our people. We've seen the benefits firsthand at Paramount, and we want every part of Skydance to share in them."
[ Read more of this story ]( https://slashdot.org/story/26/10/26/2128235/skydance-offers-buyouts-gives-5-day-rto-order?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
# Firefox Tries to Bring Back the Internet's 'Good Old Days'
robot (spnet, 1) → All – 22:22:01 2026-10-26
Mozilla launched a new ad campaign for Firefox that leverages early internet nostalgia in a bid to win back users who switched browsers. "Today's internet tracks you, interrupts you, and asks for permissions it already took. But it wasn't always that way, and it's not how it's supposed to work," writes Mozilla CEO Anthony Enzor-DeMeo in a post on LinkedIn. "It's how a few companies decided it should work, because it pays."
"We're making a different bet at Firefox. Remember us? Well, we're still here, and we don't think the internet should be like this..." The ad features viral internet stars from yesteryear, including Tay Zonday of "Chocolate Rain" fame, Gary Brolsma of "Numa Numa", Noah Ritter, better known as the "Apparently Kid", and Laina Morris, the face of the "Overly Attached Girlfriend" meme, among others.
[ Read more of this story ]( https://news.slashdot.org/story/26/10/26/1931208/firefox-tries-to-bring-back-the-internets-good-old-days?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
robot (spnet, 1) → All – 22:22:01 2026-10-26
Mozilla launched a new ad campaign for Firefox that leverages early internet nostalgia in a bid to win back users who switched browsers. "Today's internet tracks you, interrupts you, and asks for permissions it already took. But it wasn't always that way, and it's not how it's supposed to work," writes Mozilla CEO Anthony Enzor-DeMeo in a post on LinkedIn. "It's how a few companies decided it should work, because it pays."
"We're making a different bet at Firefox. Remember us? Well, we're still here, and we don't think the internet should be like this..." The ad features viral internet stars from yesteryear, including Tay Zonday of "Chocolate Rain" fame, Gary Brolsma of "Numa Numa", Noah Ritter, better known as the "Apparently Kid", and Laina Morris, the face of the "Overly Attached Girlfriend" meme, among others.
[ Read more of this story ]( https://news.slashdot.org/story/26/10/26/1931208/firefox-tries-to-bring-back-the-internets-good-old-days?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
# Instagram Chases YouTube With a Push For Longer, Widescreen Videos
robot (spnet, 1) → All – 22:22:01 2026-10-26
Instagram is testing a new longform, horizontal video format called "Features" as it pushes further into YouTube territory and expands its presence on TVs. The Verge reports: Instagram boss Adam Mosseri has been against doing longform video on the platform "for a long time," he says in a six-and-a-half-minute video (here's the widescreen version) with VP of product Tessa Lyons, saying that "one of my concerns has been, how do we make sure that we keep Instagram not just about entertainment, but about connecting with friends." If you watch a longform video, "it's a lot of Reels, photos, and carousels that you might not have sent to a friend," meaning less likes and shares. Now, though, the team is working on making shortform and longform video "symbiotic," according to Mosseri, like podcasts or comedy specials that can be both long videos and broken up into shorter ones.
The announcement of this widescreen video push also follows the launch of Instagram's TV app late last year. That app launched first as a Reels-focused experience and as a pilot for Amazon Fire TV devices in the US, but it's since expanded to Google TVs, Samsung TVs and Apple TV, and Instagram launched new features like the ability to watch Stories earlier this year.
[ Read more of this story ]( https://entertainment.slashdot.org/story/26/10/26/1846258/instagram-chases-youtube-with-a-push-for-longer-widescreen-videos?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.
robot (spnet, 1) → All – 22:22:01 2026-10-26
Instagram is testing a new longform, horizontal video format called "Features" as it pushes further into YouTube territory and expands its presence on TVs. The Verge reports: Instagram boss Adam Mosseri has been against doing longform video on the platform "for a long time," he says in a six-and-a-half-minute video (here's the widescreen version) with VP of product Tessa Lyons, saying that "one of my concerns has been, how do we make sure that we keep Instagram not just about entertainment, but about connecting with friends." If you watch a longform video, "it's a lot of Reels, photos, and carousels that you might not have sent to a friend," meaning less likes and shares. Now, though, the team is working on making shortform and longform video "symbiotic," according to Mosseri, like podcasts or comedy specials that can be both long videos and broken up into shorter ones.
The announcement of this widescreen video push also follows the launch of Instagram's TV app late last year. That app launched first as a Reels-focused experience and as a pilot for Amazon Fire TV devices in the US, but it's since expanded to Google TVs, Samsung TVs and Apple TV, and Instagram launched new features like the ability to watch Stories earlier this year.
[ Read more of this story ]( https://entertainment.slashdot.org/story/26/10/26/1846258/instagram-chases-youtube-with-a-push-for-longer-widescreen-videos?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.