WEEKLY IT & CYBERSECURITY INSIGHTS
Security news, practical IT explainers, and original technical commentary from John Brown.

Fortinet has issued coordinated security hardening updates across multiple enterprise products. Administrators are being encouraged to update promptly while detailed vulnerability disclosures are scheduled to follow.

PHP released security updates on October 21 for two critical vulnerabilities. On October 23, the PHP team also disclosed a separate, less common remote-code-execution scenario that needs a configuration mitigation.

Arista has confirmed active exploitation of a critical vulnerability in VeloCloud Orchestrator. The issue can let an authenticated account—including a low-privilege user—gain powerful operator access.

A critical Fortinet FortiSIEM vulnerability now has public exploit code. Learn what CVE-2026-106173 means, which systems are affected, and the practical steps administrators should take.