HTTP2Shell emergency updates, PHP2Shell attacks, GitHub worm

HTTP2Shell sparks emergency patches

https://www.bleepingcomputer.com/news/security/critical-http2shell-brotli-vulnerability-triggers-emergency-patches/

PHP2Shell: patch, then investigate

https://www.securitymagazine.com/articles/102693-php2shell-exploited-in-the-wild

GitHub worm hides in oversized files

https://www.theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570

Cathedral gets inside Anthropic…

The skinny

The skinny isn't ready yet — notes appear once the transcript is processed.