The FBI published IC3 PSA 261023, a follow-up to its Oct 21 social media warning on the PHP core RCEs CVE-2026-109618 and CVE-2026-109619. It urges organizations to update immediately per php.net, inventory where PHP runs (including vendor products that bundle it), and, unusually, to take systems offline if they cannot be updated right away. It also asks defenders to watch for PHP processes launching shells or downloading files, and to report compromises to a local FBI field office or ic3.gov with web server and PHP logs preserved.