Tech BriefA daily tech newsletter for engineers and SaaS builders: AI, programming, security and e-commerce.https://digests.aiocean.dev/2026-10-28T08:11:05.372890+07:00 PHP2Shell, deadline tomorrow, and a third PHP RCE with no fixhttps://digests.aiocean.dev/2026-10-282026-10-28T07:30:00+07:002026-10-28T08:11:05.372890+07:00PHP2Shell is exploited, the federal deadline is tomorrow, and a third PHP RCE has no patch. PHP2Shell is now exploited, and CISA says patch by Thursdayhttps://digests.aiocean.dev/2026-10-272026-10-27T07:30:00+07:002026-10-28T00:36:18.397852+07:00PHP's RCE bugs now have working shells behind them, while the AI industry argues about trust: Qwen's odd network calls, Anthropic's S-1 and Claude's usage… PHP2Shell, and why patching is only step onehttps://digests.aiocean.dev/2026-10-262026-10-26T07:30:00+07:002026-10-28T00:36:18.397211+07:00AI vendors are tightening what their models will help with while AI-found bugs like PHP2Shell flood in, and your patch window is the thing that shrinks. Brotli decoder RCE (CVE-2026-111497, "Node2Shell" / "HTTP2Shell")https://digests.aiocean.dev/2026-10-252026-10-25T07:30:00+07:002026-10-28T00:36:18.393438+07:00A compression library nobody audits became the week's remote-code-execution bug, and the real argument is about how fast you can patch. Node2Shell, an RCE in the Brotli decoder that reaches Node, Bun and Pythonhttps://digests.aiocean.dev/2026-10-242026-10-24T07:30:00+07:002026-10-28T00:36:18.391919+07:00The week the runtime layer got audited by machines: PHP and Node both shipped emergency RCE fixes within a day of each other. PHP2Shell, two RCEs and an embargo that did not holdhttps://digests.aiocean.dev/2026-10-232026-10-23T07:30:00+07:002026-10-28T00:36:18.387181+07:00The day the embargo broke: PHP's two critical RCEs, a Node Brotli RCE and a CA with single-byte keys landed in the same 48 hours, and the supply chain… PHP2Shell, two critical RCEs in the PHP runtimehttps://digests.aiocean.dev/2026-10-222026-10-22T07:30:00+07:002026-10-28T00:36:18.382066+07:00PHP's runtime got two critical RCE bugs on a day when three other pieces of trusted infrastructure, a CA, a Python package and a hosting platform, also lost… PHP2Shell, two critical RCEs in PHP corehttps://digests.aiocean.dev/2026-10-212026-10-21T07:30:00+07:002026-10-28T00:36:18.372192+07:00Two trust systems failed in the same 48 hours: the PHP runtime under most of the web, and the CA bundle under every HTTPS client.