A 9.2 severity PHP flaw went public on Wednesday; the first scanner reached us the same afternoon, and Icecat stayed online throughout. On 21 October, the PHP project shipped emergency releases for two critical flaws in the PHP engine, together known as PHP2Shell. In practical terms, an attacker with no account and no prior access could send one crafted request to a vulnerable server and, in the worst case, take control of it. PHP runs a large share of the web, so automated scanners started looking for exposed sites within hours, and public exploit code is now circulating. For a…
Sprint 106 touched several parts of the platform. The AI Assistant got a new engine and a new model. Story-in-Story, the Publication Status Auditor and the new user system were demoed. Framework v2 moved closer to becoming the default, and the native Story Builder gained customization options. Search, import and language handling got smaller consistency upgrades. Story-in-Story – Nested Stories for Targeted Campaigns Story-in-Story lets you embed one story inside another and configure it directly in the builder. This allows a broader campaigns approach with retailer-specific banners. Global Master with local overrides: a global master story is the default fallback.…
