0
Deep & Emerging Tech·October 22, 2026·1 min read

PHP: The three little letters wreaking havoc across the web

Share

Two new PHP vulnerabilities hitting an ecosystem that underpins up to 70% of websites is a reminder that legacy web stacks are now systemic risk, not just tech debt. If you run WordPress, Drupal, or any PHP-heavy estate, treat this as a trigger to inventory exposure, accelerate patch automation, and budget for gradual migration off unmaintained modules.

Deep & Emerging Tech

eMudhra says it will exit the SSL/TLS certificate business, 1% of its revenue, after its TLS certificates with private keys of just 3 to 8 bits were compromised

A major CA walking away after shipping TLS keys as short as 3–8 bits is a reminder that trust infra can fail at the most basic layer—key generation and policy enforcement. If you run PKI or depend on third-party certs at scale, treat CA selection and cryptographic audits as an active vendor-risk surface, not a checkbox.