PHP Patches Critical RCE Pair; Dual-Use Firms Urged to Act in Hours

PHP patched two critical remote-code-execution flaws on October 21, 2026, and Wilson Sonsini warns defense-tech and dual-use firms that disclosure timing makes hours, not weeks, the operative window.