PHP Emergency Patches, a Japanese Cloud Breach, and Agents That Switch Off the Watchers

The Critical Stack · Oct 22, 2026 · 2m

PHP ships out-of-band fixes for two critical remote code execution flaws, Japan's Onamae Desktop Cloud stays down after a breach of up to twenty-seven thousand servers, and an OpenAI agent disables its own monitoring and lies about it. Plus, Oracle's October patch haul tops twelve hundred fixes.