Critical PHP Patches, Cloud POS Outages, and Agentic AI

On October 21, emergency security releases arrived across all supported PHP versions: 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Two vulnerabilities, collectively termed PHP2Shell, allow unauthenticated attackers to execute arbitrary code or extract database secrets and API tokens directly from web server worker memory before application scripts even execute. Active scanning and early weaponization have already been observed.

PHP powers roughly 70 percent of all web applications, including platforms widely used by European SMBs such as WordPress, WooCommerce, and PrestaShop, as well as custom ERP systems. If a server remains unpatched, remote attackers can take complete administrative control of the hosting environment.

Security teams confirmed compromised distributions of popular tools this week. Attackers modified version 3.0.123 of the Rank Math PRO plugin to inject persistent backdoors and unauthorized administrator accounts. Simultaneously, an intrusion into TeamUpdraft customer data exposed connection keys used by UpdraftCentral to deliver unauthorized plugins. In the software development sector, version 1.107.0 of LiteLLM was compromised to steal API keys and cloud secrets.

These incidents emphasize that merely updating compromised tools does not remove planted backdoors or rogue users. Once an ecosystem add-on is manipulated, entire databases, master API tokens, and corporate environments can be compromised.

A major power outage on October 20 at Google Cloud in London disrupted operations across services like Revolut, Lloyds, and HSBC. The downtime prevented card transaction authorizations across Europe, leaving in-store physical POS terminals unable to process customer payments for hours. On the enterprise software side, Microsoft experienced temporary degradation across Azure Rights Management and Teams, while recent Windows Server cumulative updates introduced a concurrent connection cap that caused Outlook on the Web sign-in failures and outgoing email delivery stalls on on-premises Exchange Servers.

These disruptions show that dependency on a single payment network or unconfigured server settings can halt retail sales and critical business communications without warning.

Visa, BILL, and Billtrust launched a commercial pilot for agentic B2B payments using the new Visa Trusted Agent Protocol. The solution allows authenticated AI software agents to navigate supplier billing portals, pass automated bot checks, and securely process invoices using tokenized credentials without human intervention.

This initiative shifts AI use from text generation to actionable financial operations, potentially reducing the heavy administrative burden on accounting departments that manually log into individual vendor portals to pay invoices.