Global – October 29, 2026 -- OX has launched Agent Activity in early access, giving security teams step-by-step runtime visibility into AI agent sessions across its OX.VibeSec and OX.Cloud platforms, with more than 100 built-in guardrail policies.

Global – October 27, 2026 -- PHP will ship an emergency patch for two critical core vulnerabilities, CVE-2026-109618 and CVE-2026-109619, on Wednesday, October 21, 2026, at 14:00 UTC (10:00 ET). The PHP security team rates both flaws CVSS v4.0 9.2, and researchers describe them as unauthenticated remote code execution.

Global – October 27, 2026 -- Sixty-five percent of 2,000 senior security decision-makers say they have too many security tools or vendors, and 53% say their tools can't be integrated, according to 2025 research by Barracuda and Vanson Bourne. For application security (AppSec) teams, the sprawl shows up as overlapping findings from static application security testing (SAST), software composition analysis (SCA), and cloud-native application protection platforms (CNAPPs).