AI Security
PHP's Critical Flaws Drew a Prime Minister's Call. What Happened, and How to Prepare
On 21 October 2026, Japan's National Cybersecurity Office and Prime Minister Sanae Takaichi were reported to have urged action on two critical PHP vulnerabilities (CVSS 9.2). This article separates what the PHP project itself confirmed from what the press reported about the government's role. Node.js shipped ten fixes the same day, and I describe what we checked on our side. Then I set out what a company can build in peacetime, because this will happen again.
2026-10-22Ryuta Hamamoto