PHP ships an emergency release today for two critical RCE flaws. Emergency fixes for CVE-2026-109618 and CVE-2026-109619.Browsers block all eight eMudhra intermediate CAs after their private keys proved trivially recoverable.ConnectWise Cloud Backup's slow phased restore.App Governance permissions move to Defender XDR Unified RBAC from mid-Nov.NIST, NSA and CISA incident-response practices for AI agents acting beyond their authority. This episode is AI-voiced (NotebookLM) from Ted Johansson's curated daily M365 and cyber governance digest. Rss