Regulation ● Covered in 1 story + Follow
This profile is built automatically from TLDRocket coverage.
Disclosures of two critical “PHP2Shell” vulnerabilities in core PHP triggered emergency patching and coordinated mitigations Security issue
The daily briefing
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the day in two minutes. Follow companies and topics for alerts, or get the briefing in Slack. Free, no spam, unsubscribe anytime.
TLDRocket
22 October 2026
The most important AI story today wasn’t a new model spec sheet—it was the reminder that “normal operation” can still be a security failure. EchoLeak showed how a carefully crafted, Microsoft 365 Copilot input could steer how the system processes enterprise content, changing downstream actions and creating a pathway to exposure. It’s the kind of threat shift security teams have been warning about: once AI can do more than answer—once it can act inside workflows—the risk isn’t just credential theft or malware, it’s mapping inputs to permissions and outcomes, including that fuzzy zone called “excessive agency.”
Read the full briefing →