
Critical PHP patch: who is responsible for updating your site?
On October 21, 2026, PHP shipped a fix for two critical flaws that let attackers into a server without a password. This isn't a technical issue: it's knowing who, in your company or at your provider, updates it that same day and confirms it in writing.

