CYBERSECURITY

Black October Explained: What Happened and How to Stay Safe

A wild week of security news in October 2026. Here is what is real.

AllInfo AI

WHAT IS IT

A nickname, not one attack

Black October covers several security problems made public in one week of October 2026.

PHP2SHELL

Two critical PHP flaws

These bugs let attackers run code on web servers. PHP shipped fixes on 21 October.

CERTIFICATES

Weak keys at eMudhra

Eight certificate authority keys were weak, so about 30,000 website certificates need replacing.

AI ON BOTH SIDES

Attacks start faster

AI helped find a PHP bug hidden for over ten years. Attackers use AI too, so attacks now start within hours.

RUMOURS

No internet shutdown

Viral posts talked about internet lockdowns. No government or major company has announced anything like it.

FOR EVERYONE

Do these today

Update your phone and browser, use a password manager, and turn on passkeys or two step verification.

SITE OWNERS

Check your website

Update PHP, WordPress and plugins. Change admin passwords if your site ran an old PHP version.