Blog

The ISVTEC blog: security flaws, incidents and lessons from managed infrastructure and DevOps, told with the real figures, including what is still left to do.

PHP flaw CVE-2026-109618: our clients protected before the fix even existed

Critical PHP flaw of 21 October 2026: our clients protected that morning, before the official fix, then patched on every PHP version and operating system.

Learn more →