Newly released Corsha Folio module gives security, network, and operations teams a clear, focused view into what's running and why in OT

WASHINGTON, October 21, 2026 /PRNewswire/ -- Corsha, the leader in Industrial Identity Security, today announced Folio, a new module on the Corsha Industrial Identity Security Platform that automatically creates and updates operational maps and documentation showing how industrial systems are connected and communicating. Built on live network and access data, Folio gives teams a system of record for how their OT systems are running today, not just how they were designed. Security and operations teams can use this as-running view to spot risk and drift, prepare for incidents, and speed up compliance.

Keeping up-to-date as-running documentation of an industrial network is tedious, manual work. More often than not, OT documentation doesn't exist, or the environment has drifted so far it's of little use to OT teams. Manual assessments take weeks of labor across a myriad of tools, and the compliance artifacts they produce are often still incomplete and inaccurate.

Folio uses the power of Corsha Gatekeepers to capture the identities, connections, and data flows on the OT network, answering what is communicating, when, why, and how. Teams can generate derived hardware lists, connection maps true to the moment, and Microsoft Visio data flow diagrams. That documentation is ready to share across OT, security, and network teams and is designed for risk management and compliance frameworks, including IEC 62443, NERC CIP, and Zero Trust.

Unlike previous manual approaches, Folio brings together real-time connections, data flows, machine identity, and access intelligence. Rather than building more data-drowning dashboards, Folio produces actionable artifacts that teams can use to assess risk, make real-time decisions, and modernize with confidence.

"Industrial enterprises can't modernize safely when their operational picture no longer reflects how their operations actually run," said Anusha Iyer, Founder and CEO of Corsha. "Folio builds on the identity intelligence at the heart of our platform to give security and operational leaders an accurate, current understanding of every machine and every connection, and its purpose in their environment. That means faster recovery when incidents happen, compliance that keeps pace with change, and a clear path to adopting new technologies like robotics and physical AI. We are excited about this use of AI and ML in the Corsha platform to automate the tedious but critical work of day-to-day operations."

Folio supports three core use cases:

- Day-to-day operations: For OT operators who assess risk, make daily decisions, and respond to incidents, Folio removes the need to manually maintain system and network documentation.

- Continuous compliance: For OT leaders working to clear compliance roadblocks to innovation, such as Authority to Operate (ATO), Zero Trust, and NERC CIP, Folio delivers updated system, connection, and architecture documentation in minutes.

- Accelerated technology adoption: For OT leaders and architects bringing in advanced robotics, physical AI, predictive analytics, and more, Folio enables teams to assess the impact of new industrial capabilities on brownfield environments to speed production deployment.

Key Folio capabilities include:

- Real-time visibility – Uses the Corsha Industrial Identity Security Platform and its Gatekeepers to deliver the most current, as-running view of what's on the OT network.

- Connection intelligence – Maps connections and data flows, not just inventory, so teams can answer the what, where, when, and why questions needed to secure and modernize their operations.

- Identity core – Builds on the Corsha Platform's identity-based foundation to monitor and track changes that IP addresses alone can't reveal, keeping assessments accurate as operations evolve.

- Architecture design – Lets teams design boundaries, zones, and machine groups on a live Connection Canvas that shows data flows, connections, and the segmentation and policies that are live and enforced.

- IEC 62443 native – Speaks the industry-standard language of IEC 62443, from the Connection Canvas through to exported assessment artifacts.

- Visio export ready – Exports accurate operating diagrams to Microsoft Visio so teams can collaborate in the most common OT design format.

With the new Corsha Folio module, organizations can cut the time spent on compliance activities by orders of magnitude, reduce time to recover from security incidents and errors, prevent misconfigurations and downtime with always up-to-date system specifications, and eliminate the cost of manually maintaining operations documentation.

About Corsha

Corsha securely connects the operational systems that run our world. Corsha is forging a new identity-driven approach to OT security to stop attacks in real time, operate with agility, and modernize with confidence. As the demand to connect operational systems and modern applications surges, industrial enterprises grow more exposed to real-world risk, both physical and financial. The Corsha Industrial Identity Security Platform closes this connection gap by helping enterprises easily level up from monitoring to identity-driven action. The platform transforms OT security by bringing together an identity control plane, inline Gatekeepers, and expert intelligence, enabling operational, security, and compliance teams to safely scale automation and adopt new technologies such as predictive analytics, robotic automation, and physical AI. Trusted across industries including aerospace, automotive, consumer goods, data centers, defense, and facilities management, Corsha is backed by leading venture investors including Ten Eleven Ventures, Razor's Edge Ventures, Booz Allen Ventures, and Cybernetix Ventures. Learn more at www.corsha.com.

SOURCE Corsha

Share this article

New research from Michaels and Morning Consult finds 80% of parents are seeking screen-free holiday activities, and nearly 8 in 10 consumers who celebrate value a $25 handmade gift as much as or more than a $100 store-bought one

IRVING, Texas, Oct. 21, 2026 /PRNewswire/ -- This year, people are looking for ways to unplug and make the holidays more personal. According to the 2026 Michaels State of the Holiday Season Report, released today and conducted by Morning Consult, eight in 10 parents (80%) are seeking screen-free, hands-on holiday activities, and nearly 8 in 10 consumers who celebrate (78%) say a $25 handmade gift means as much as or more than a $100 store-bought one.

The national survey of 2,502 U.S. adults also reveals that nearly two-thirds (65%) want a less commercial holiday season, while 66% say hands-on activities make the season more meaningful. More than half (54%) say their household already has more stuff than it needs, and 61% are looking for screen-free holiday activities.

"Families are heading into December feeling stretched, both on time and on budget," said Heather Bennett, President and Chief Customer Officer at Michaels. "This report shows that many are responding by starting earlier and choosing what feels personal over what's pricey. At Michaels, we're making that easier, with inspiration to get started, affordable gifts and projects they can make or personalize, and in-store events where families and friends can unplug, get together, and create."

Four Trends Shaping the Season

- Screen-Free Connection

Parents are feeling screen fatigue most: more than half (56%) say they're worn out by the time they spend on screens, and half (50%) plan to do more screen-free activities than last year. Gen Z, the first generation to grow up with smartphones, isn't far behind. Nearly three-quarters (73%) are looking for screen-free, hands-on activities to do at home, and 46% plan to do more than last year. Many are setting boundaries, too: 69% of Gen Z and 72% of Millennials plan to set screen-free rules or try to unplug informally during the holidays.

- A Holiday Headstart

For many households, December stress is pushing the season earlier. Six in 10 of those who celebrate (60%) expect December to be stressful, and among them, the top concerns are spending more than they can afford (49%) and finding the right gifts (47%). So they're starting sooner: more than one-third (36%) begin buying gifts before November, including 19% who start in October, while 29% begin crafting and nearly a quarter (24%) begin decorating before November.

Among early starters, 53% say they do it to reduce December stress and 49% to spread spending across multiple paychecks.

- Meaning Over Materialism

When it comes to what makes the holidays special, presence matters more than presents. Among those who celebrate, spending time with family and friends is the No. 1 source of holiday joy (48%), while receiving gifts ranks near the bottom (18%). More than half of adults (54%) also say their household has more stuff than it needs.

That mindset carries into gifting. Six in 10 (61%) say they're likely to give a handmade or DIY gift this season, and 60% say personal sentiment matters more than price when choosing a gift.

- The Next Gen Décor Divide

Younger generations are turning holiday décor into a form of self-expression. Among those who celebrate, Millennials (36%) and Gen Z (34%) are nearly six times as likely as Baby Boomers (6%) to embrace playful, eclectic, and maximalist or moody, dramatic and glamorous holiday styles. Classic and natural looks stay popular across generations, with about half of Gen Z, Millennials and Gen X leaning that way.

Millennials and Gen Z are also getting into the spirit sooner. About one-third (34% and 32%, respectively) begin decorating before November, compared with 11% of Boomers.

Fueling Creativity and Celebration All Season Long

Michaels is helping families slow down, start early and make the season their own:

- Unplug and create together: Thousands of holiday DIYs starting at $2.99 give shoppers easy ways to step away from screens, from DIY ornaments to holiday-themed amigurumi crochet kits and seasonal mini framed paint-by-numbers. In-store events offer more chances to gather and make something by hand, from personalized ornaments to holiday junk journals.

- Get a head start: Holiday décor and supplies like artificial trees, party supplies, and decorative accents are available now in-stores and online to help shoppers get ahead of the December rush.

- Give something personal: DIY gifting supplies, personalized same-day ornaments starting at $15, and custom-framed photos like 10-Minute Custom Framing starting at $29 help shoppers give something meaningful without overspending.

- Bring your holiday style to life: Four exclusive décor collections, with pieces starting at $4.99, offer different ways to make the season feel like your own: the playful maximalism of Merry Kitschmas, the rich tones and glamour of Twilight Tidings, the classic styling of Bough & Berry, and the natural textures and neutrals of Wrapped in Joy.

Read the full State of the Holiday Season Report here. For holiday project ideas and to view upcoming in-store events, visit www.michaels.com.

About the Research

The 2026 Michaels State of the Holiday Season Report was fielded by Morning Consult Oct. 8–11, 2026, among a national sample of 2,502 U.S. adults, including 2,322 who plan to celebrate a holiday this season. Interviews were conducted online, and the data were weighted to approximate a target sample of U.S. adults based on age, race/ethnicity, gender, educational attainment, and region. Results from the full survey have a margin of error of ±2 percentage points.

About The Michaels Companies, Inc.

At The Michaels Companies Inc., our purpose is to fuel the joy of creativity and celebration. As the leading destination for creating and celebrating in North America, we operate over 1,300 stores in 49 states and Canada and online at Michaels.com and Michaels.ca. The Michaels Companies, Inc. also owns Artistree, a manufacturer of custom and specialty framing merchandise. Founded in 1973 and headquartered in Irving, Texas, Michaels is the best place for all things creative. For more information, please visit http://www.michaels.com.

Media Contact

Kim Kornfeld

[email protected]

SOURCE The Michaels Companies, Inc.

Share this article

NEW FRANKEN, Wis., Oct. 21, 2026 /PRNewswire/ -- Agra Energy, a renewable fuels technology company, today announced the successful demonstration of renewable fuel production at its new facility in New Franken, Wisconsin, producing Fischer Tropsch Liquid Fuels, including sustainable aviation fuel (SAF) and renewable naphtha from dairy-farm biogas. Agra Energy's technology licensing collaborator is HYCO1 and the facility uses HYCO1's patented CUBE™ reforming syngas production technology (Carbon Utilization, Best Efficiency), including its CORE™ Catalyst (Carbon Optimized Reforming). The demonstration validates Agra Energy's technology at Technology Readiness Level 9 (TRL 9), the highest stage of technology maturity, proven in commercial operation, and opens the door to customer facility licensing and the build-out of additional Agra Energy plants.

At the heart of the result is the HYCO1 CORE™ Catalyst. Conventional biogas-to-liquids processes treat the carbon dioxide in raw biogas as a waste stream to be stripped out and vented. CORE™ Catalyst instead converts that CO₂, together with the renewable natural gas (RNG), into syngas for Fischer-Tropsch synthesis. CORE is tunable in real time production allowing the production of targeted 2:1 syngas ratios without the need for gas cleanup, saving additional capital and energy for low carbon fuel production. Capturing the carbon in that CO₂ also adds more than 20 percent carbon monoxide to the syngas yield and therefore to fuel yield, giving technology licensors the highest renewable fuel yield in the industry.

"This demonstration is the moment our technology moves from promising to proven," said Brad Yacullo, Chief Operating Officer, Agra Energy. "We are turning a dairy farm's biogas, including the CO₂ that others throw away, into SAF and renewable naphtha at industry-leading yield. With TRL 9 in hand, we are ready to license this technology to customers and to build additional plants of our own. There are so many opportunities to turn livestock waste into low carbon sustainable fuels that go far beyond just dairy to beef feedlots, food waste, and poultry farms."

"Converting the CO₂ in biogas rather than discarding it is what sets this process apart, adding more than 20 percent to yield from biogas to fuels while reducing emissions and carbon intensity of those fuels," said Kurt Dieker, Chief Development Officer, HYCO1. "Seeing our syngas catalyst perform in another commercial setting at New Franken confirms what it can do for renewable fuel and chemical economics."

Demonstration highlights

- Produced sustainable aviation fuel (SAF) and renewable naphtha from dairy-farm biogas at the New Franken facility.

- Achieved the industry's highest yield using the HYCO1 CUBE™ technology and CORE™ Catalyst, which converts the CO₂ in biogas along with the RNG, adding more than 20 percent to fuel output.

- Validated the technology at TRL 9, proven in an operational commercial environment.

- Established the basis for customer facility licensing and internal development of additional plants sized at a targeted 150 to 250 barrels per day (BPD), supporting Agra Energy's goal of contracting 1,000 BPD of biogas-derived fuel production capacity in 2027.

Path to commercial scale

With the technology proven, Agra Energy and HYCO1 are advancing on two fronts: licensing their process to customers for their own facilities and developing additional company-owned plants targeting 150 to 250 BPD of renewable fuel production each. Together, these facilities will support Agra Energy's target of adding 1,000 BPD of renewable fuel production capacity from biogas in 2027. The modular plant size is designed to sit close to agricultural and other biogas sources, turning distributed waste streams into drop-in liquid fuels.

Seeking Customers, Offtake, and Capital partners

Agra Energy is now seeking project developers, offtake partners for its SAF and renewable naphtha, and capital partners to accelerate the deployment of this industry-leading technology. Airlines, fuel buyers, chemical producers, and investors interested in partnering with Agra Energy are invited to contact the company's COO, Brad Yacullo, at [email protected].

About Agra Energy

Agra Energy is a renewable fuels company developing scalable solutions that convert biogas and other methane-rich waste streams into renewable liquid fuels, including sustainable aviation fuel and renewable naphtha. FT technology, paired with the HYCO1's CORE™ syngas catalyst, recovers value from agricultural and other underutilized resources while supporting lower-carbon, and reduced-emission fuel production. For more information, visit www.agraenergy.com

Agra Energy Commercial Contact

Brad Yacullo

Chief Operating Officer & Co-Founder, Agra Energy

[email protected]

Agra Energy Media Contact

Nicole Yacullo

HR/Marketing Coordinator, Agra Energy

[email protected]

About HYCO1

HYCO1 is a breakthrough CO₂ utilization technology company whose process and catalysts transform waste CO₂ emissions into sustainable, high-value products without reliance on subsidies or carbon credits. HYCO1 Vantage™ reformers are engineered to convert nearly 100% of CO₂ feedstock into syngas, with options for purified hydrogen and carbon monoxide, at costs lower than traditional gray processes. Syngas, hydrogen, and carbon monoxide industrial gases are used in the production of over $1 trillion of global chemicals and fuels annually.

HYCO1's proprietary CUBE™ Technology, which include Vantage™ reformers and CORE™ catalyst, enables near-complete CO₂ conversion in a single reactor pass, producing low-cost, low-CI, chemical-grade syngas (H₂ and CO) at commercial scale, a feat never previously achieved. HYCO1 empowers industrial emitters to convert CO₂ from a costly liability into a profitable, circular opportunity. HYCO1 is the leading CO₂ utilization process technology, enabling Gigaton impact on the world's CO₂ emissions. For more information, visit www.hyco1.com.

HYCO1 Media Contact

Tim Lozano

Director of Marketing, HYCO1, Inc.

[email protected] 

SOURCE Agra Energy

Share this article

The Real Deal Miami Forum to Address South Florida's Shifting Real Estate Landscape Amid Wealth Influx and Housing Affordability Pressures

Miami-Dade Mayor Daniella Levine Cava, David Martin, Judy Zeder, Florida State Senator Mack Bernard among featured speakers at upcoming summit on South Florida's market evolution following Ken Griffin's historic $1.1B Mana Wynwood acquisition.

MIAMI, Oct. 21, 2026 /PRNewswire/ -- As South Florida's real estate market undergoes one of the most transformative shifts in its history,The Real Deal will host its annual Miami Real Estate Forum on November 4-5 at Mana Wynwood Convention Center, bringing together prominent developers, top-producing brokers, and civic leaders to evaluate the region's evolving landscape.

The gathering arrives at a critical juncture for South Florida real estate. Sustained wealth migration has solidified Miami as a global financial and commercial hub, highlighted by mega-transactions like Ken Griffin's $1.1 billion purchase of the 30-acre Mana Wynwood site. However, this unprecedented influx of capital has exacerbated pressing regional challenges, particularly surrounding workforce housing affordability, infrastructure capacity, and commercial positioning.

To examine these complex dynamics, the Miami Real Estate Forum will feature an elite roster of industry leaders and policymakers, including: Miami-Dade County Mayor Daniella Levine Cava, Genghis Hadi of Nahla Capital, luxury brokers Dora Puig and Dina Goldentayer, Related Group's Nick Pérez, Gil Dezer of Dezer Development, and many more.

"Big money keeps coming into Miami, but the question is what happens beyond the billion-dollar deals," said Amir Korangy, founder and publisher of The Real Deal. "Where will the people who keep this city running afford to live? Can the infrastructure keep up? We're bringing together the people building, financing and governing South Florida to talk about where the opportunities are—and what needs to be fixed."

Key Themes & Agenda Topics:

- Wealth Migration & Institutional Capital: Analyzing how high-net-worth relocations and record-breaking acquisitions, such as the Mana Wynwood transaction, are reshaping regional asset valuations.

- Tackling the Housing Affordability Gap: Innovative public-private partnerships and policy incentives aimed at expanding middle-income and workforce housing across Miami-Dade.

- The Evolution of Luxury & Retail Corridors: How changing demographics are re-shaping high-end residential demand and prime commercial districts.

Event Details:

- Dates: Wednesday, November 4 and Thursday, November, 5

- Time: 9 am - 4 pm both days

- Location: Mana Wynwood Convention Center, 318 NW 23rd Street. Miami, FL 33127

- Registration / Details: Miami Real Estate Forum

About The Real Deal The Real Deal is the leading source of real estate news and information, providing in-depth coverage of the industry's most important trends, deals, and players across sectors including development, brokerage, finance, policy, and technology. With a focus on providing actionable insights and analysis, The Real Deal helps real estate professionals stay informed and make better business decisions.

To request a media pass, please contact:

Michele Langer

Head of Marketing, The Real Deal

[email protected] 

SOURCE The Real Deal

Share this article

Two critical memory-corruption remote code execution (RCE) vulnerabilities, collectively dubbed PHP2Shell, have been disclosed in core PHP, the underlying engine powering a vast portion of the web. The CrowdStrike Falcon® platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of both vulnerabilities.

Tracked as CVE-2026-109618 and CVE-2026-109619, both vulnerabilities carry a CVSS 4.0 score of 9.2 (Critical) and are classified as CWE-824: Access of Uninitialized Pointer. Both allow an unauthenticated remote attacker to execute arbitrary system commands on an affected web server over HTTP.

The two issues share a single root cause. When PHP encounters a fatal condition (exhausting its configured memory_limit, exceeding the maximum execution time, or losing the client connection), it does not return an error up the call stack. It raises a fatal error and uses longjmp() to abandon the current execution context outright, aborting the request. Any C function caught midway through building a data structure is simply discarded: no destructors run, no bookkeeping is rolled back, and nothing records that the structure is incomplete. PHP then proceeds into an otherwise ordinary cleanup sequence that assumes every structure is in a consistent state.

The two CVEs describe where that assumption breaks:

- CVE-2026-109618 (RCE via out-of-memory) covers contexts that leave request memory uninitialized. A data structure is marked as containing an entry before the memory backing that entry is allocated; when the allocation is the one that crosses the memory limit, the entry is left holding stale heap data. The failing request's own cleanup routine then reads and branches on those bytes.

- CVE-2026-109619 (RCE via fatal errors) covers contexts that leave global state invalid. A module-level global still points into the per-request heap that shutdown has already freed, and still reports its operation as active. A subsequent request handled by the same worker process reads or branches on that freed memory.

In both cases, the attacker controls the trigger and, critically, the data that PHP ultimately misinterprets. CrowdStrike has verified end-to-end that a single anonymous POST request can cause an Apache mod_php worker to launch a shell process and execute an attacker-specified command, with no authentication, no session, and no vulnerable application code involved.

What elevates these vulnerabilities is their placement in the execution stack. PHP parses incoming request data before extensions are initialized and before a single line of application code is compiled, so exploitation is independent of what the server hosts. A meticulously maintained application is exposed to precisely the same degree as a neglected one. The attack is also remarkably quiet: The worker process does not crash, the server returns a standard HTTP 200 response, and application logs record nothing unusual.

In our testing, we developed an exploit code that operated consistently across x86-64 and ARM architectures, remained reliable across worker restarts, and on ARM-based hosts, which are increasingly common in cloud fleets, defeated Address Space Layout Randomization (ASLR) using only HTTP requests.

Technical Details

The Shared Root Cause: longjmp() Without Unwinding

Both vulnerabilities live in Zend, the engine at the heart of PHP. Zend is the C implementation that compiles PHP source into bytecode, executes it in a virtual machine, and manages everything the language needs at runtime: variables, arrays, objects, reference counting, and memory allocation. Originally written by Zeev Suraski and Andi Gutmans (the name is a contraction of their first names) and introduced with PHP 4, it is not an optional component or a third-party add-on; it ships inside every PHP build, which is why its source lives in the Zend/ directory of php-src. In practice, this means a defect in Zend is a defect in the PHP engine itself, affecting every application, framework, and extension running on the interpreter, regardless of how that code is written.

Two pieces of core Zend machinery are central to the issues described here: the HashTable, which backs every PHP array including the $_POST superglobal, and the Zend Memory Manager (Zend MM), PHP's own per-request allocator that sits between PHP and the operating system. PHP's fatal-error path terminates in zend_bailout(), which performs a LONGJMP out of the current C call stack:

// Zend/zend.c

ZEND_API ZEND_COLD ZEND_NORETURN void _zend_bailout(const char *filename, uint32_t lineno)

{

...

CG(unclean_shutdown) = 1;

...

LONGJMP(*EG(bailout), FAILURE);

}

Nothing between the fatal error and the enclosing zend_catch block executes. Any caller that mutated the state and relied on reaching its own cleanup code leaves that state behind. This is safe only if every such caller is written with abrupt termination in mind, and several are not.

CVE-2026-109618: Uninitialized Request Memory, Consumed During the Same Request

The canonical instance is _zend_hash_str_add_or_update_i() in Zend/zend_hash.c, the helper behind every string-keyed insert into a PHP array. On the insert path, it increments both element counters, takes a pointer to the new bucket, and only then allocates a copy of the key:

// Zend/zend_hash.c

add_to_hash:

idx = ht->nNumUsed++;

ht->nNumOfElements++;

p = ht->arData + idx;

p->key = key = zend_string_init(str, len, GC_FLAGS(ht) & IS_ARRAY_PERSISTENT);

If zend_string_init() exceeds memory_limit, Zend MM raises a fatal error that ends in zend_bailout(). Execution never returns to complete the bucket. Now, the table reports one more entry than it actually contains, and that entry's value, hash, and key pointer are whatever bytes the allocator last left in that memory; the bucket array is allocated with an uninitialized emalloc(), with only the hash region explicitly reset.

During teardown, php_request_shutdown() destroys the superglobals, and zend_array_destroy() iterates nNumUsed buckets. The stale entry is passed to i_zval_ptr_dtor(), which treats the leftover bytes as a reference-counted value: It dereferences the pointer they contain, decrements the reference count at that address, and (if it reaches zero) dispatches through a function-pointer table indexed by a type tag that also came from the leftover bytes.

Triggering the condition requires nothing more than a URL-encoded POST body, because PHP populates $_POST inside php_hash_environment(), which php_request_startup() calls before zend_activate_modules() and before any script is compiled. A field with a nested name such as ZZZZ…[x]=1 causes php_register_variable_ex() to insert the outer name as a new array key, so the attacker directly controls the length of the key that must be allocated. Sizing that name to cross memory_limit places the bailout precisely on the key allocation.

Control over the leftover bytes comes from the allocator's determinism. Zend MM serves small allocations from per-size free lists in strict last-in-first-out order and never zeroes reclaimed blocks. An earlier field in the same request, one whose value PHP copies, decodes, and immediately releases, can therefore be sized so that its freed contents occupy exactly the block the corrupted array subsequently claims. The stale entry becomes a fully attacker-defined value, which we used to synthesize a counterfeit array whose destructor pointer resolves to libc's system(), with the command string resident in the same block.

The only server-side artifact of a successful attempt is a generic fatal error in the web server log:

PHP Fatal error: Allowed memory size of 16777216 bytes exhausted (tried to allocate 3670048 bytes) in Unknown on line 0

The in Unknown on line 0 is the tell: It confirms that no PHP file was ever executing.

CVE-2026-109619: Invalid Global State, Consumed by a Subsequent Request

The second CVE follows the same mechanism but the damage lands in process-scoped state, which shifts the exploitation window to a later request. Here, the interrupted operation is one that caches state in a global variable and depends on reaching its own cleanup call to clear it. PHP caches the active serializer and unserializer contexts in module globals and reuses the cached pointer whenever the nesting level is non-zero. Only the matching destroy call decrements that level and clears the pointer, and only an extension's request-initialization routine resets it. Session handling behaves comparably, holding the session identifier, handler state, session variables, and upload-progress state in globals cleared by dedicated shutdown routines.

When a fatal error interrupts one of these operations, the matching teardown is skipped. The global retains its pointer, and the nesting counter still asserts that the operation is active. Request shutdown then frees the entire per-request heap, but the global survives because it belongs to the process rather than the request. PHP is left holding a module-level pointer into memory it has already released.

Two factors make this reachable and controllable:

- Worker reuse: In persistent-worker deployments such as Apache mod_php, the same process handles the next request. The stale global is found intact, the operation is believed to be in progress, and the freed pointer is read, written through, or branched on. Whatever occupies that memory by then is attacker-influenced, because the intervening request is also the attacker's: They choose its size and contents, and Zend MM's allocation behavior is deterministic enough to place them reliably. PHP-FPM terminates a worker whose request startup fails, which removes the reuse for interruptions in the startup phase; an interruption inside an already-running script leaves the FPM worker alive and equally exposed.

- Startup ordering: php_request_startup() parses request variables before running extension request-initialization callbacks.

A new report from the CrowdStrike Counter Adversary Operations team details research into four previously unreported threat actors, each of whom left their offensive agent frameworks exposed via open directories. In doing so, they shared detailed insight into their use of AI agents and revealed how adversaries are quickly becoming more proficient in AI.

AI is changing the speed and scale of cyber operations. Counter Adversary Operations, which brings together the CrowdStrike Intelligence and CrowdStrike OverWatch teams, is closely watching. Between May and August 2026, CrowdStrike Intelligence documented several incidents in which threat actors used AI not only to create tooling or artifacts, but to conduct agentic campaigns in which AI agents make decisions and execute commands.

About the Adversaries

Below is a high-level overview of the threat actors behind these campaigns:

Threat Actor 1

A Spanish/English-speaking operator that has compromised at least 15 Argentina-based healthcare entities and exfiltrated credentials and medical records from at least one victim.

The threat actor ran a purpose-built autonomous penetration testing (pentesting) harness against Argentine healthcare organizations. They implemented a dual-agent architecture in which a “Supervisor” Claude Code agent selects the next task from a state machine (i.e., a predefined workflow of attack stages) and an “Executor” agent performs the task. This framework is derived from the open-source PentestGPT project, but the threat actor has rebuilt it with additional MCP servers, Python-based exploitation scripts, and skills.

Threat Actor 2

A Chinese-speaking operator with 20+ named global targets. They compromised government entities of two countries and targeted private sector entities in Brazil and the U.S., including entities in biotech, healthcare, food and beverage, retail, technology, and travel.

This threat actor primarily accessed Claude models via a China-based AI proxy service (aka a “transfer station”), and they built two pentesting harnesses that grant Claude Code varying levels of autonomy. One harness consists of a Python-based project that deterministically conducts reconnaissance and then asks an AI provider to choose among a preestablished set of possible actions that are deterministically routed to the appropriate agent. A different harness provides more agentic flexibility, allowing Claude Code to operate either as a single agent pursuing a target according to an elaborate standard operating procedure, or delegating actions to multiple specialist agents in parallel.

Threat Actor 3

The least sophisticated of the four in this report is an Indonesian-speaking actor that uses 819 skills (overwhelmingly sourced from public GitHub repositories, primarily claude-red1) without additional orchestration to enable Claude Code to conduct intrusion campaigns. In these campaigns, the threat actor instructs Claude Code to compromise a target and assumes the skills will offer sufficient guidance to ensure the intrusion succeeds. However, in the observed activity, the threat actor periodically had to intervene to overcome the model’s safety guardrails or to exhort Claude Code to keep trying to overcome a particular barrier.

Despite their limited grasp of security fundamentals, the threat actor still used Claude Code to compromise several Indonesian government domains, a government domain of another country, and several private-sector entities.

Threat Actor 4

Threat Actor 4 is a group of Russian-speaking individuals. They exfiltrated corporate client data from a U.S.-based customer relationship management vendor and compromised several private-sector SaaS and data center entities based in Russia, Kyrgyzstan, and the U.S., in addition to one government domain of another country.

This threat actor uses a single /pentest-setup slash command to task Claude Code with a seven-step workflow. This workflow provides guidance for enumerating the target environment, grants Claude Code near-total autonomy in selecting exploitation methods, defines a high-level post-remote code execution workflow, and provides explicit exfiltration instructions.

What This Means for Defenders

The four cases documented in this report likely demonstrate that agentic AI commoditizes baseline offensive cyber operations. This assessment is made with moderate confidence based on the included case studies, all of which showcase threat actors delegating operational decision-making across the kill chain to agentic AI. Working at machine speed, agentic AI can autonomously achieve objectives, often within an hour.

Findings from these cases likely support the following assessments:

- Agentic AI-supported intrusions will almost certainly increase in volume and sophistication, an assessment made with high confidence based on threat actors’ rapid adoption of agentic AI, the effectiveness of the agentic AI-supported intrusions, the continuous improvements in AI models, and the proliferation of open-source offensive agent frameworks.2

- Agentic AI will reduce barriers to effective intrusions as we expect over the next 12 months, some low-skill threat actors will likely use agentic AI to conduct campaigns at a level of effectiveness and scale previously only achievable by organized criminal groups or state-nexus actors.

- Some threat actors will likely improve the OPSEC of their agentic intrusion campaigns over the next 12 months, an assessment made with moderate confidence based on AI development trends and trusted open-source reporting.

The team’s findings expand on how these adversaries weaponize AI coding assistants and enable long-term agentic operations using different methodologies. Download the full report for detailed case studies and guidance on how defenders can respond to this activity.

1 https[:]//github[.]com/SnailSploit/Claude-Red

2 https[:]//github[.]com/vxcontrol/pentagi

MACAO, Oct. 21, 2026 /PRNewswire/ -- The 12th Global Tourism Economy Forum • Macao 2026 ("GTEF" or the "Forum") concluded successfully. The event achieved fruitful outcomes, bringing together around 1,300 government officials, representatives from international organizations, business leaders, experts, scholars, and journalists from over 20 countries and regions. Live broadcasts of the Forum attracted over 8.6 million online views. During the Forum, distinguished keynote speakers shared valuable insights and experiences centered on key topics including resilient tourism economy, inbound tourism, cultural tourism integration, and sustainability. These discussions not only offered pragmatic solutions rooted in Chinese experience and Macao's wisdom to help the global tourism industry navigate uncertainties, but also once again underscored Macao's standing as the World Centre of Tourism and Leisure, alongside its unique charm as an international hub for MICE and cultural exchange.

The closing ceremony was held on the evening of 16 October. The main guests who attended the occasion included HO Hau Wah, Vice Chairman of the National Committee of the Chinese People's Political Consultative Conference, Forum Chairman of Global Tourism Economy Forum; Shaikha AL NUWAIS, Secretary-General of UN Tourism; LUO Laijun, Vice Chairman of the All-China Federation of Industry and Commerce; Bateer, Executive Vice Governor of Hainan Provincial People's Government (Featured Province); Miguel SANZ CASTEDO, Representative of the Minister of Industry and Tourism of Spain (Partner Country), Director General of Turespaña and President of the European Travel Commission; LONG Yongtu, Former Vice Minister of Ministry of Foreign Trade & Economic Cooperation of China, Former Secretary-General of Boao Forum for Asia; Pansy HO, Vice Chairman and Secretary-General of Global Tourism Economy Forum; and Maria Helena DE SENNA FERNANDES, Director of Macao Government Tourism Office ("MGTO") of the Macao Special Administrative Region, Vice Chairman of Global Tourism Economy Forum.

In her closing remarks, Maria Helena DE SENNA FERNANDES, MGTO Director and Vice Chairman of GTEF, highlighted that bringing together decision-makers, drivers of development and industry leaders in the global tourism economy over the years, the Forum has facilitated sharing of experience and pragmatic cooperation across borders and sectors, developing into an international platform for building consensus and shaping industry trends. Macao not just leverages its unique advantages brought by "the support of the Motherland and its connectivity to the world", but also shares its own experiences in attaining urban progress, joining hands with partners from worldwide to navigate new paths towards a more innovative and sustainable horizon for the tourism economy.

Pansy HO, Vice Chairman and Secretary-General of the Global Tourism Economy Forum, noted in her closing remarks: "One message today is clear: going green is not a burden, but a scalable opportunity that resonates with young travelers and keeps value within local communities."

Looking ahead, she welcomed Hainan's interest in hosting the next edition of the Forum and said: "Rather than just fixing existing damage, gathering in Hainan invites us to return to our original aspiration, our chuxin, and embrace Green and Blue Tourism. Can we make it a model for 'trace-free, preservation-first tourism'—enhancing nature without destroying its soul, rather than disrupting it only to repair it later?"

In his remarks at the closing ceremony, Bateer, representative of Hainan Province as the Featured Province, and Executive Vice Governor of Hainan Provincial People's Government, stated that Hainan looks forward to leveraging Macao's role as a bridge connecting with the world to deepen cooperation with global partners in mutual visitations, concerted industry development and cultural tourism innovation among other areas. He added that Hainan sincerely hopes to work together with the Forum's organizing units, the Macao SAR Government and friends from all sectors to implement the fruitful outcomes of the Forum, facilitate the hosting of GTEF in Hainan in 2027, and promote collaborative development between Hainan as an International Tourism and Consumption Center and Macao as a World Centre of Tourism and Leisure, driving economic growth and benefiting people around the world.

This edition of the Forum featured 28 main forum sessions, high-level dialogues and panel sessions, among other highlights. A total of 75 officiating guests, renowned speakers and moderators from near and afar were invited to share their experiences and insights into the resilience of the tourism economy, inbound tourism, integration of culture and tourism among other aspects, navigating the paths and opportunities for high-quality and sustainable tourism development from multiple angles. About 50 bilateral meetings were convened during the Forum, covering tourism, civil aviation, investment promotion, international cooperation and other fields. Business matching sessions were also conducted, engaging over 600 participants on site and effectively forging over 1,000 business-to-business matchings online and offline, which included over 90 successful matchings in Spain Business Matching sessions. The activities facilitated exchange and cooperation among industry delegates from around the world, promoted industry connections and expanded the breadth of opportunities for cooperation. Special interviews, project presentations and other activities were conducted as well to foster international exchange and broaden the scope of cooperation across sectors.

The Forum announced that Hainan Province will become the host province for the 13th Global Tourism Economy Forum in 2027, with the Macao Government Tourism Office and the Department of Tourism, Culture, Radio, Television and Sports of Hainan Province signing a memorandum of understanding to further deepen Hainan-Macao cooperation in tourism and related fields. Aligning with the development strategies of the Guangdong-Hong Kong-Macao Greater Bay Area and the Hainan Free Trade Port, both sides will strengthen resource sharing and industry matching to promote the high-quality, synergistic development of their tourism sectors.

The Forum program also featured curated cultural and inspection tours, allowing guests to gain immersive insights into Macao's diversified "Tourism+" offerings. The itinerary included visiting the World Heritage site – "The Historic Centre of Macao" and attending the themed exhibition "Encounter Ancient China through Museum Cultural Creative Products" jointly presented by 22 cultural institutions nationwide; or touring the Islands Healthcare Complex – Macao Medical Center of Peking Union Medical College Hospital ("Macao Union Medical Center"), the "Hengqin Traditional Chinese Medicine Culture Experience Hall" at the Traditional Chinese Medicine Science and Technology Industrial Park of Co-operation between Guangdong and Macao, and the Zhuhai Chimelong International Ocean Resort, among others. These visits allowed participants to gain a deeper understanding of Macao and Hengqin's ongoing efforts to advance industry collaboration and regional synergy across domains such as "Tourism + Culture" and "Tourism + Big Health".

Building consensus in crisis and achieving breakthroughs through resilience, the 12th Global Tourism Economy Forum not only provided a clear roadmap for the global cultural and tourism industry to navigate change and transformation, but also embarked on a new journey of deepening cooperation, stretching from a "Macao platform" to Hainan-Macao synergy and on to global outreach. The Forum will continue to serve as a bridge connecting China and the world, and advance the steady progress of the global tourism economy along a path of openness, innovation, and inclusiveness.

-END-

About Global Tourism Economy Forum

Founded in 2012, the Global Tourism Economy Forum is a premier international platform dedicated to promoting the sustainable development of the global tourism economy. Serving as an essential bridge for exchange and cooperation between China and the international community, the Forum convenes leaders from governments, enterprises, academia, and international organizations worldwide to address opportunities and challenges in global tourism, establishing itself as one of the most influential annual events in the global tourism economy sector.

For more details about the Forum, please visit https://gte-forum.com/en/ and follow official social media channels for the latest updates.

Share this article

Nearly 3.5-acre solar array advances the resort's broader sustainability and energy-efficiency strategy

NATIONAL HARBOR, Md., Oct. 21, 2026 /PRNewswire/ -- As organizations around the world observe World Energy Saving Day on October 21, Gaylord National Resort & Convention Center is celebrating a major sustainability milestone with the full activation of a rooftop solar installation spanning approximately 3.5 acres atop the resort's convention center. Featuring 4,696 solar panels, the array is projected to generate nearly 3.4 million kilowatt-hours of renewable electricity annually and represents a significant investment in the resort's long-term sustainability and energy strategy.

The solar array is expected to supply up to 20 percent of the resort's electrical load during peak production periods and offset up to 50 percent of the electricity purchased from the local utility. Combined with the resort's existing combined heat and power system (Cogen) and advanced building-efficiency technologies, the solar installation strengthens an integrated energy strategy designed to increase on-site generation, reduce emissions and decrease reliance on grid-supplied electricity.

The solar project marks another investment by Ryman Hospitality Properties, Inc., owner of Gaylord National Resort and Convention Center, in the resort's long-term future. Operated by Marriott International, the solar grid also supports Marriott International's broader sustainability goals through the initiative.

"This project is an important example of how we are partnering with Marriott International to invest in initiatives that support our shared conservation goals and create long-term value for our shareholders," said Mark Fioravanti, President and Chief Executive Officer of Ryman Hospitality Properties. "With this project complete, we're reducing demand on the local power grid while improving operational efficiency and strengthening the resort's climate resiliency for years to come."

Activated in June 2026, the solar array has generated approximately 495,316 kilowatt-hours of renewable electricity to date, equivalent to powering approximately 48 average U.S. households for one year, while avoiding an estimated 333 metric tons of carbon dioxide emissions.

With the system's inverters operational, the array is projected to avoid an estimated 2,285 metric tons of carbon dioxide emissions annually and generate enough renewable electricity to power approximately 331 average U.S. homes, based on U.S. Environmental Protection Agency methodology.

Gaylord National partnered with REV Energy Ventures to develop and implement the solar project.

"Gaylord National's solar project demonstrates how large hospitality properties can integrate renewable energy while maintaining seamless operations," said Jeff Bedard, founder and CEO of REV Energy Ventures. "The project's scale highlights the role on-site renewable energy can play in supporting both operational efficiency and sustainability goals."

The new solar installation builds upon an energy-efficiency strategy already in place across the resort. Since 2018, Gaylord National's on-site Cogen system has generated electricity while repurposing waste energy for heating, helping meet more than 75 percent of the resort's energy needs and significantly reducing greenhouse gas emissions.

"The addition of solar power strengthens the foundation we have established through our Cogen system and other efficiency investments," said Derek Brauner, director of engineering at Gaylord National Resort and Convention Center. "By generating electricity on-site, capturing thermal energy that would otherwise be wasted and continuously monitoring our building systems, we are able to operate more efficiently. The solar array is another important component of a broader resort-wide strategy focused on energy efficiency, resource conservation and long-term sustainability."

Beyond its environmental benefits, this dual approach helps strengthen long-term energy resilience by providing greater control over operating costs and supporting reliable energy production for a destination that serves a large volume of guests, meeting attendees and convention visitors each year. Together, the Cogen and solar systems are foundational elements of Gaylord National's broader sustainability strategy, helping the resort reduce its environmental impact while supporting efficient, reliable operations for years to come.

The initiative builds on Gaylord National's broader sustainability efforts focused on energy efficiency, waste reduction, resource conservation and community impact.

The resort partners with the Food Recovery Network to donate surplus prepared food, contributing more than 115,000 pounds of donated food to date and helping provide approximately 30,000 meals annually to local hunger-fighting organizations.

Additional initiatives include energy-saving building technologies, continuous operational monitoring, rooftop beehives, an on-site herb garden and a commitment to local and sustainable sourcing.

The resort also supports waste-reduction efforts through single-stream recycling, paperless billing, the elimination of single-use toiletry bottles and the recycling of up to 170,000 pounds of cardboard each month.

About Gaylord National Resort and Convention Center

Gaylord National Resort & Convention Center is the largest non-gaming hotel and convention center on the East Coast. Located along the banks of the Potomac River in National Harbor, Maryland, the resort is part of Marriott International's portfolio and is owned by Ryman Hospitality Properties, Inc. Opened in April 2008, Gaylord National is an AAA Four Diamond resort located eight miles from Washington, D.C. The resort offers nearly 2,000 guest rooms, including 110 suites; a 19-story garden atrium; 600,000 square feet of indoor and outdoor meeting space; and a variety of restaurants and lounges, including Old Hickory Steakhouse, Harbor Social and Lookout 18 Rooftop Lounge.

About Ryman Hospitality Properties, Inc.

Ryman Hospitality Properties, Inc. (NYSE: RHP) is a leading lodging and hospitality real estate investment trust that specializes in group-oriented, upscale convention center resorts and entertainment experiences. The Company's holdings include Gaylord Opryland Resort & Convention Center; Gaylord Palms Resort & Convention Center; Gaylord Texan Resort & Convention Center; Gaylord National Resort & Convention Center; and Gaylord Rockies Resort & Convention Center, five of the top seven largest non-gaming convention center hotels in the United States based on total indoor meeting space. The Company also owns the Grande Lakes Orlando Resort, the JW Marriott Phoenix Desert Ridge Resort & Spa and the JW Marriott San Antonio Hill Country Resort & Spa as well as two ancillary hotels adjacent to the Company's Gaylord Hotels properties. The Company's hotel portfolio is managed by Marriott International and includes a combined total of 13,956 rooms as well as more than 3 million square feet of total indoor and outdoor meeting space in top convention and leisure destinations across the country. RHP also owns an approximate 70% controlling ownership interest in Opry Entertainment Group (OEG), which is composed of entities owning a growing collection of iconic and emerging country music brands, including the Grand Ole Opry; Ryman Auditorium; WSM 650 AM; Ole Red; Category 10; Nashville-area attractions; and Block 21, a mixed-use entertainment, lodging, office and retail complex, including the W Austin Hotel and the ACL Live at the Moody Theater, located in downtown Austin, Texas. OEG manages select outdoor live music venues, including Ascend Federal Credit Union Amphitheater in Nashville and CCNB Amphitheatre in Simpsonville, South Carolina. OEG also owns a majority interest in Southern Entertainment, a leading festival and events business. RHP operates OEG as its Entertainment segment in a taxable REIT subsidiary, and its results are consolidated in the Company's financial results.

Media Contact

Nisha Stephens

Public Relations Manager, Gaylord National Resort

[email protected]

Press Kit

SOURCE Gaylord National Resort

Share this article

Costa Rica's Peninsula Papagayo Breaks Ground on Second Oceanfront Andaz Residences Neighborhood

A fully serviced residential sanctuary on Culebra Bay, with completion expected in 2029

CULEBRA, Costa Rica, Oct. 21, 2026 /PRNewswire/ -- Peninsula Papagayo, widely regarded as Costa Rica's most exclusive resort and residential community, today announced the groundbreaking of a second neighborhood of 35 oceanfront Andaz Residences on the North Pacific coast's Culebra Bay. The milestone marks the next step in the long-term vision of Mohari Hospitality, a global investor focused on the development of luxury hospitality assets, which acquired the remaining stake in Peninsula Papagayo earlier this year to become its sole owner.

Bordered by the protected forests of the Área de Conservación Guanacaste, the 35-acre oceanfront Andaz Residences set a new standard for luxury branded living in Costa Rica. Designed as a private residential neighborhood, the enclave sits adjacent to the Andaz hotel and offers seamless access to the full Peninsula Papagayo ecosystem that includes the Arnold Palmer Signature Ocean Course, the members-only Clubhouse at Prieta Beach, and Papagayo Park, a 20-acre sports and wellness hub.

The residences are designed for second home living, offering two-, three-, and four-bedroom floor plans, each with a private plunge pool and most with rooftop terraces framing sweeping views of Culebra Bay. At the heart of the community, the private owners' clubhouse overlooks the bay and sets the tone for the experience within, including a resort-style pool, fitness and wellness areas, terraces designed for gathering, a flexible lounge, and an upper-level café. Day-to-day life is managed by Andaz Peninsula Papagayo Resort, with a dedicated staff offering 24-hour concierge, valet parking, priority reservations, in-residence dining, housekeeping, and an optional rental program available through Andaz.

Designed by Predock, the acclaimed Albuquerque-based architecture and planning studio, the residences are shaped by their setting. Forms rise from the land's natural terraces, with cantilevers that echo the curve of the coastline. Materials are raw yet refined: textured stucco, matte glass, and wood-shake roofing, with passive design principles built in from the ground up so that sustainability is woven into the architecture rather than added as an afterthought.

As a private residential neighborhood, the Andaz Residences meet all Costa Rican government site coverage and density requirements, allowing construction to proceed without delay. Priced from under $4 million, the residences represent an exceptional opportunity for an oceanfront, fully serviced home at Costa Rica's most exclusive address.

To learn more or to schedule a private preview, visit peninsulapapagayo.com/luxury-real-estate/andaz-residences/ .

About Peninsula Papagayo

Located on Costa Rica's North Pacific coast in Guanacaste, Peninsula Papagayo is Latin America's premier coastal retreat, spanning 1,400 acres of breathtaking landscapes. This private resort and club community offers a seamless blend of adventure, nature, and sustainability in one of the world's most biodiverse destinations. The community features Four Seasons Resort Peninsula Papagayo, Andaz Peninsula Papagayo Resort, Nekajui Peninsula Papagayo, A Ritz-Carlton Reserve, the Clubhouse at Prieta Beach, the Arnold Palmer Signature Ocean Course, Marina Papagayo, and an exclusive collection of oceanfront homes and villas. Committed to environmental stewardship, Peninsula Papagayo champions sustainable development, conservation, and community initiatives to preserve Costa Rica's rich natural and cultural heritage. Just 30 minutes from Guanacaste International Airport (LIR), Peninsula Papagayo is easily accessible via more than 100 seasonal weekly flights from major cities in North America and Europe. For more information, visit: PeninsulaPapagayo.com.

About Mohari Hospitality

Established in 2017 by Mark Scheinberg, Mohari Hospitality is a global investor focused on the ownership and long-term development of luxury hospitality assets. Mohari's portfolio includes a portfolio of luxury assets at Peninsula Papagayo in Costa Rica, including Four Seasons Resort Peninsula Papagayo, Nekajui Peninsula Papagayo, a Ritz-Carlton Reserve, and Andaz Peninsula Papagayo Resort; Four Seasons Hotel Madrid and the Bauer Hotel in Venice. The firm is also developing new projects in Paris and Miami, and owns a large-scale residential and resort development in Lake Tahoe. In addition, Mohari owns Tao Group Hospitality and Hakkasan Group, and has an ownership stake in The Ritz-Carlton Yacht Collection. For more information, visit www.moharihospitality.com

About Hyatt Hotels Corporation

Hyatt Hotels Corporation, headquartered in Chicago, is a leading global hospitality company guided by its purpose – to care for people so they can be their best. As of June 30, 2026, the Company's portfolio included more than 1,500 hotels and all-inclusive properties in 83 countries across six continents. The Company's offering includes brands in the Luxury Portfolio, including Park Hyatt®, Alila®, Miraval®, Impression by Secrets, and The Unbound Collection by Hyatt®; the Lifestyle Portfolio, including Andaz®, Thompson Hotels®, The Standard®, Dream® Hotels, The StandardX®, Breathless Resorts & Spas®, JdV by Hyatt®, Bunkhouse® Hotels, and Me and All Hotels; the Inclusive Collection, including Zoëtry® Wellness & Spa Resorts, Hyatt Ziva®, Hyatt Zilara®, Secrets® Resorts & Spas, Dreams® Resorts & Spas, Hyatt Vivid® Hotels & Resorts, Bahia Principe Hotels & Resorts, Alua Hotels & Resorts®, and Sunscape® Resorts & Spas; the Classics Portfolio, including Grand Hyatt®, Hyatt Regency®, Destination by Hyatt®, Hyatt Centric®, Hyatt Vacation Club®, and Hyatt®; and the Essentials Portfolio, including Caption by Hyatt®, Unscripted by Hyatt, Hyatt Place®, Hyatt House®, Hyatt Studios®, Hyatt Select, and UrCove. Subsidiaries of the Company operate the World of Hyatt® loyalty program, ALG Vacations®, Mr & Mrs Smith, Unlimited Vacation Club®, Amstar® DMC destination management services, and Trisept Solutions® technology services. For more information, please visit www.hyatt.com.

About Andaz

Andaz hotels are designed for those with a global sensibility. These hotels are grounded in their local surroundings and infused with local culture. Their personalized, attentive service empowers guests and enriches the world around them, leaving a lasting sense of energy and fulfillment. Enjoy World of Hyatt benefits with eligible stays at Andaz hotels – discover more here.

Media Contacts

Peninsula Papagayo

Danielle Finnegan

[email protected]

Mohari Hospitality

FGS Global

[email protected]

Forward-Looking Statements

Forward-Looking Statements in this press release, which are not historical facts, are forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. Actual results, performance, or achievements may differ materially from those expressed or implied by these forward-looking statements. In some cases, you can identify forward-looking statements by the use of words such as "may," "could," "expect," "intend," "plan," "seek," "anticipate," "believe," "estimate," "predict," "potential," "continue," "likely," "will," "would" and variations of these terms and similar expressions, or the negative of these terms or similar expressions. Such forward-looking statements are necessarily based upon estimates and assumptions that, while considered reasonable by the issuer of this release, are inherently uncertain. You are cautioned not to place undue reliance on any forward-looking statements, which are made only as of the date of this press release. Neither the issuer of this release nor any other entity associated with it or its subject matter undertakes any obligation to update publicly any of these forward-looking statements to reflect actual results, new information or future events, changes in assumptions or changes in other factors affecting forward-looking statements, except to the extent required by applicable law. If one or more forward-looking statements is updated, no inference should be drawn that any additional updates will be made with respect to those or other forward-looking statements.

SOURCE Peninsula Papagayo

Share this article

Collaboration will initially focus on signage applications for Japan's railway industry

BILLERICA, Mass., Oct. 21, 2026 /PRNewswire/ -- E Ink, a pioneer and leading global developer of ePaper technology, today announced a partnership with FUJIFILM Imaging Systems Co., Ltd. to establish a large-format color ePaper signage business, initially targeting the railway sector. Upon successful completion of prototype assessments, the companies will begin introducing select sizes in 2027.

ePaper is increasingly turned to as an alternative display medium in the railway industry, especially due to labor shortages and the rising costs associated with printing, transporting, installing, and disposing of traditional paper posters.

E Ink and Fujifilm Imaging Systems will combine E Ink's ePaper technology with Fujifilm Imaging Systems' established railway-sector business foundation, implementation capabilities, and operational expertise. Together, the companies plan to provide end-to-end support for large-format color ePaper signage, spanning customer proposals, installation, and ongoing operation.

The details regarding the full-color ePaper sizes and release dates are as follows:

- 55-inch E Ink Marquee

- Prototype Release: December 2026

- Mass-Production Release: March 2027

- B1-size E Ink Marquee

- Prototype Release: October 2027

- Mass-Production Release: January 2028

"We see significant opportunity for E Ink's ePaper to replace traditional print posters in Japan's transportation industry, particularly as our large-format and color capabilities continue to advance," said JM Hung, President of E Ink Holdings. "With the visibility of print and the flexibility of digital updates, ePaper helps organizations streamline content changes, reduce printing and material waste, and deliver timely information using very little power."

"Fujifilm Imaging Systems' expertise in imaging, printing, color management, and quality control strongly complements E Ink's pioneering leadership in ePaper technology," said Takashi Toyofuku, Director at FUJIFILM Imaging Systems. "By bringing together these capabilities and our established customer relationships, we are well positioned to accelerate the adoption of large-format ePaper—beginning with railway advertising and signage and expanding over time into other industries throughout Japan."

About E Ink

E Ink Holdings Inc. (8069.TWO), based on technology from MIT's Media Lab, provides an ideal display medium for applications spanning eReaders and eNotes, ESLs and retail media, digital signage, IoT devices and more, enabling customers to put displays in locations previously impossible. E Ink's electrophoretic display products make it a worldwide leader for ePaper. Its low-power displays enable customers to reach their sustainability goals, and E Ink has pledged using 100% renewable energy in 2030 and reaching net zero carbon emissions by 2040. E Ink has been recognized for its efforts by receiving validation from Science-Based Targets (SBTi) and is listed in both the DJSI World and DJSI Emerging Indexes and is listed in Taiwan's Taipei Exchange (TPEx) and the Luxembourg market. For more information, please visit www.eink.com. E Ink. We Make Surfaces Smart and Green.

About FUJIFILM Imaging Systems

FUJIFILM Imaging Systems Co., Ltd. serves as the domestic sales company for Fujifilm Group imaging products in Japan. Drawing on the expertise and technologies developed by Fujifilm, the company offers photography, video and information products and services that combine quality, reliability, security and ease of use for individual and corporate customers. As a member of the Fujifilm Group, Fujifilm Imaging Systems develops products, services and solutions that respond to evolving customer needs while supporting the preservation and advancement of photography and imaging culture. Its work contributes to the Fujifilm Group's purpose: "Giving our world more smiles."

SOURCE E Ink Corporation

Share this article