Amazon reports attackers exploited critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) **four days before patches were released**, with exploit attempts reaching millions. Cloudflare detected thousands of probes before disclosure, escalating to hundreds of thousands within hours. While no confirmed breaches have occurred, Wordfence blocked over 74,000 attempts across 5 million WordPress sites. Organizations globally, including Nomura, Mitsubishi UFJ, and government agencies, suspended services as a precaution. Experts warn outdated PHP systems—over 1 million hosts lack updates—pose persistent risks, as dependencies may complicate patching efforts.
Capitolis, a fintech company serving banks and financial institutions, raises $220 million in financing, including a $120 million Series E equity round at a $1.9 billion valuation. Existing investor Citi leads the equity round, joined by new strategic investors Bank of America, Nomura and Tradeweb Markets, while First Citizens Innovation Banking, Hercules Capital and Pinegrove Venture Partners provide debt financing. Most of the funds support Capitolis’ acquisition of eSecLending, which adds securities lending to its financial resource optimization platform.
