Zero-Day North: PHP2Shell exploitation confirmed as Canada flags Siemens flaw
Alex and Jordan cover Monday Oct 26, 2026 cybersecurity news: the Canadian Centre for Cyber Security advisory AV26-1083 on Siemens Mendix SAML, a Payload ransomware claim against a mining survey firm, PHP2Shell confirmed exploited in the wild plus the unpatched third PHP flaw, today's CISA KEV patch deadline for Collabora and VeloCloud, and AI coding agents hijacked via a malicious AGENTS.md file.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.