Code News Today — October 23, 2026

The world of code is abuzz with security concerns today, as multiple high-profile vulnerabilities have come to light. On the front lines, a PHP2Shell exploit has been discovered that can bypass protections meant to prevent remote code execution, giving hackers a potential entry point into vulnerable systems. This comes on the heels of news that hackers had a four-day head start on the epic PHP2Shell vulnerability, highlighting the importance of swift patching and mitigation. Meanwhile, a max-severity bug in GitLab has been revealed, allowing remote code execution across a staggering 12 years of releases, underscoring the need for vigilant maintenance of even legacy systems.

Beyond security, the intersection of technology and art is also making waves. The Nikon Small World photomicrography contest has announced its 2026 winner, showcasing the stunning visuals that can be achieved through the lens of a microscope. On the business side, Spotify is tightening its grip on Family Plan accounts, implementing a 'routine improvement' that aims to crack down on account sharing. And for companies operating in South Korea, achieving ISMS certification is a crucial step in localizing compliance at scale. As code continues to shape our world, staying informed about these developments is key to harnessing its potential and mitigating its risks.

Today's signal:
• PHP2Shell exploit bypasses protections designed to stop remote code execution (theregister.com)
• Meet the 2026 winner of Nikon's Small World photomicrography contest (arstechnica.com)
• Max-severity GitLab bug allows remote code execution over 12 years of releases (theregister.com)
• Hackers got a four-day head start on epic PHP2Shell vulnerability (arstechnica.com)
• Spotify confirms Family Plan crackdown, but calls it a ‘routine improvement’ (techcrunch.com)
• Localizing compliance at scale: achieving South Korea’s ISMS certification (blog.cloudflare.com)