Operations | Monitoring | ITSM | DevOps | Cloud

Discover how php2shell vulnerabilities expose PHP servers to remote code execution and how Harness virtual patching protects endpoints while you deploy fixes. On October 21, 2026, the PHP project rushed out emergency patches for two critical flaws nicknamed php2shell (CVE-2026-109618 and CVE-2026-109619, both rated 9.2 out of 10). This isn't a bug in some plugin or a server someone set up wrong. It's in PHP itself, in the way the language has handled errors since 2012.

You're investigating checkout errors when someone asks who's coordinating the incident. Support needs an update, and another responder is looking for the runbook. You stop what you're doing to get everyone pointed in the same direction. They're all reasonable requests, but each one takes your attention away from understanding the problem. Yes, your team has a process for handling incidents, but carrying it out is another job for someone who's already busy.

Software teams are taking on more work than ever. Developers are juggling more branches, coding agents are keeping CI busy through the weekend, and builds are passing more often and finishing faster. But is all that extra activity helping teams ship faster? Today we released the 2026 State of Software Delivery Q3 Pulse report, the latest in our quarterly series tracking how software teams are adapting to AI-driven development.

The rise of large-language models (LLMs) that can understand and create text, and reason about problems has opened the door for software agents that use the reasoning power of LLMs to interact with the wider world and solve problems. At Kubex, our bread and butter is compute and GPU resource optimization, so it’s natural for us to ask how agents could help our customers more effectively optimize their resources.

Last updated: October 21, 2026. We'll update this article as PHP and Linux distributions publish new information. PHP2Shell is the nickname of two critical vulnerabilities in PHP that let an attacker run code on a web server without logging in. PHP released the fixes on October 21, 2026, and IT and security teams now need to know which of their servers and computers run a vulnerable PHP version, so they can patch those first.

Your company talks about AI spend in its own terms, like projects, teams, and products. Now AI Signals can show AI spend in those terms, too. Write a CostFormation rule in CloudZero that groups AI spend by categories you care about, and the new breakdown appears in AI Signals the same day you decide to track it. There’s no waiting for a full processing cycle.

Many CloudZero users ask the same few questions. What did my team spend this month? How is our AI spend trending over the last 30 days? What does one MCP tool call cost? Now you can save the exact Explorer setup behind each answer as a View and get back to it instantly. It’s not just filters and grouping anymore, but the full picture. You can share a link with a teammate or finance and they see the same View, filtered to the spend their role allows.

The title is not a joke. For those of you who know Sentry, you know we’ve been giving back to Open Source maintainers since our early days in whatever ways we could. But around five years ago we really started to give in a more meaningful way. This year we increased our budget from $750,000 to $1,000,000.

AppSignal MCP went generally available last month. Until now, adding it to the Claude app meant pasting our endpoint URL into a custom connector form. Now you search for it like any other connector. Open Settings, go to Connectors, select the Discover tab, and search for AppSignal. That's the whole setup. For more detail on each step, follow the Claude app section of the setup guide. It works the same way in Claude on the web and in the desktop app..