Rwanda-US Migrant Deal Faces British Failure Warning | JQJO

Two critical PHP remote‑code‑execution flaws, CVE‑2026‑109618 and CVE‑2026‑109619, were disclosed on the Hacker News forum on October 20, a day before the PHP security team’s planned public disclosure and patch release at 2 pm GMT on October 21. The leaks, attributed to user ‘petecooper’, revealed the CVE identifiers and claimed the vulnerabilities would be disclosed on October 22. The PHP team confirmed the patches would be released on October 21 and assigned a CVSS score of 9.2, lower than the maximum 10.0 suggested by the leak. CERT‑EU and the UK NCSC issued emergency advisories urging users to prepare for remediation. PHP powers roughly 69.7 % of websites that use a server‑side language, including WordPress, Drupal, Joomla and Magento. The premature leak could enable attackers to exploit the flaws before patches are available.

Microsoft announced the second wave of Xbox Game Pass games for October 2026, adding the console debuts of The Séance of Blake Manor and Mouthwashing. The lineup also includes Final Fantasy 7 Remake Intergrade, which arrived on Xbox earlier this year. New titles join on 21st, 22nd, and 27th October, while several games leave the service on 31st October. The update expands the Pass’s library with atmospheric mystery, retro horror, and a popular RPG remaster.

Milwaukee Brewers pitcher Brandon Woodruff is targeting a comeback from a shoulder injury, though it remains uncertain whether he will be ready for the team’s World‑Series push.

North Korea’s state media on Wednesday warned border troops to take prompt and resolute action if South Korean forces threaten their safety, raising the risk of a clash along the heavily armed frontier. The directive followed Seoul’s pledge to punish any further provocation by Pyongyang resolutely. North Korean Army Marshal Pak Jong Chon inspected fortifications on the border with South Korea on Tuesday, accompanied by Kim Yo Jong, the sister of leader Kim Jong Un. Kim Yo Jong said new firepower units had taken their firing positions at the border. Tensions have risen since Pyongyang began fortifying its border in April two thousand and twenty‑four. The two countries are separated by the Demilitarized Zone established when the Korean War ended in an armistice in nineteen‑fifty‑three.

Independent lawmaker Helen Haines had both legs amputated after a car rammed her outside her electoral office in Wangaratta on Monday. Doctors removed her left leg and failed to save the right. The 43‑year‑old suspect, Brendan Nugent, appeared in court on Wednesday and faces charges of dangerous driving, intentional injury and harming a public official. Police say no intelligence indicated a threat to Haines. She was elected in 2019 and re‑elected in 2022 and 2025.

Armed federal agents from the Department of Homeland Security have been knocking on doors in several states to ask residents about their immigration status and whether they are registered to vote. The operation aims to root out potential noncitizen voters ahead of the midterms. DHS alleges up to two hundred fifty thousand citizens may be illegally registered, a figure disputed by election experts. Since the beginning of the Trump administration, only one hundred fifty‑six people have been charged with voting‑fraud offenses. Critics say the door‑knocking could intimidate lawful voters. The Justice Department announced that Homeland Security agents in California arrested more than twenty people, all green‑card holders, on allegations of illegal registration or voting. A 72‑year‑old man from Belize was taken from his home in pajamas and charged with voting illegally in the past four elections.