CDNetworks Releases WAF Protection for php2shell (CVE-2026-109618 and CVE-2026-109619). Reference: CDNetwork Cloud Security Last updated on October 22, 2026 On October 21, 2026, two critical remote code execution (RCE) vulnerabilities in the PHP core runtime, CVE-2026-109618 and CVE-2026-109619 (collectively dubbed "php2shell"), were disclosed. Both score 9.2 on CVSS v4.0 and could let unauthenticated attackers execute arbitrary code, access sensitive data, or disrupt services. What's affected * The flaws are memory-handling bugs in PHP itself, so any PHP-based site running an affected version may be exposed, including WordPress and Drupal. * Attacks can be triggered via specially crafted HTTP requests, such as multipart/form-data uploads involving PHP's session.upload_progress feature. Vendor protection * CDNetworks released WAF Rule ID 9657 to detect and block exploit attempts. * Customers should confirm the rule is enabled and that the WAF is in Block mode. Those in monitoring-only mode should contact technical support. Recommended actions * Identify affected assets: check PHP versions across web servers, PHP-FPM, Apache, container images, CLI scripts and long-running processes, especially PHP 8.1 and earlier unsupported versions. * Patch: upgrade to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, as applicable. * Verify: restart services, rebuild container images, and confirm the version used by running production processes, since php -v may differ from what serves web requests. * Interim protection: restrict unnecessary public access and keep the WAF in Block mode. Do not rely on disable_functions or open_basedir as mitigations. Bottom line: a WAF reduces exposure, but upgrading to a patched PHP runtime is the only complete fix.

CDNetworks to showcase ai-powered cloud security solutions at Tech Week Singapore 2026. 2026-09-24 10:00 434 SINGAPORE, Sept. 24, 2026 /PRNewswire/ - CDNetworks, the APAC-leading network to deliver edge as a service, today announced it will demonstrate its AI-powered cloud security solutions at Tech Week Singapore 2026, taking place September 29-30. Visitors can meet the CDNetworks team at Booth 5-J14. As cyber threats become faster, more sophisticated, and harder to manage, businesses need security that can keep pace. CDNetworks' AI-powered security capabilities are designed to help businesses detect and respond to evolving threats more effectively by analyzing traffic patterns, identifying anomalous activity, and adapting protection as threats change. These capabilities support protection against a range of risks, including DDoS attacks, malicious bot activity, web application threats, and API abuse. At Booth 5-J14, attendees will be able to: * See AI-powered cloud security in action: Learn how CDNetworks applies AI to enhance threat detection and adaptive protection for web applications and APIs. * Connect with CDNetworks security experts: Meet CDNetworks security specialists in person and discuss your business requirements and priorities. * Explore CDNetworks' global edge infrastructure: Discover how its network of more than 3,000 Points of Presence (PoPs) supports fast, secure, and reliable digital experiences. * Join the booth quiz: Take part in CDNetworks' on-site quiz for a chance to win prizes. "AI has real value when it helps security teams keep pace with changing threats without adding operational complexity," said Antony Li, APAC Head of Sales at CDNetworks. "At Tech Week Singapore, we'll show how CDNetworks is applying AI in practical ways to strengthen protection for web applications and APIs. We also look forward to engaging with customers and industry peers on the security and connectivity priorities shaping digital growth across the region." About CDNetworks As the APAC-leading network with over 3,000 global Points of Presence and more than 20 years of technology experience, CDNetworks delivers the fastest and most secure digital experiences to end users. Its diverse products and services include web performance, media delivery, cloud security, edge computing, zero-trust security, and colocation services, all designed to spur business innovation. Media Room more 2026-07-22 10:00 2026-07-08 10:00 2026-06-25 10:00 2026-05-13 10:00 2026-03-25 10:00 2026-02-26 10:00 2026-09-23 14:20 2026-09-23 11:04 2026-09-21 16:43 2026-09-23 10:00 2026-09-22 11:42 2026-09-21 18:21

CDNetworks releases 2025 ESG Report, advancing a More Sustainable and trusted digital future. 2026-07-22 10:00 205 SINGAPORE, July 22, 2026 /PRNewswire/ - CDNetworks, the APAC-leading network to deliver edge as a service, today released its 2025 Environmental, Social, and Governance (ESG) Report. The report details the company's progress in integrating sustainability, responsible business practices, and strong corporate governance across its global operations. CDNetworks also earned an EcoVadis Silver Medal, placing the company among the top 15% of organizations assessed globally. The report highlights progress across several key areas: Engineering a More Sustainable Internet Clean energy accounted for 86% of CDNetworks' total energy consumption in 2025. The company's next-generation edge caching architecture reduced overall CPU utilization by 17.2% and traffic to customer origin servers by 20%. CDNetworks also continued to improve infrastructure efficiency through the adoption of liquid cooling, low-power hardware, heat recovery systems, and equipment reuse. Supporting Secure and Resilient Digital Services CDNetworks continued to invest in network resilience, data protection, privacy governance, and security-by-design practices. In 2025, the company reported 100% service uptime for customers, reflecting its commitment to delivering reliable digital services as demand for online content, applications, and cybersecurity solutions continues to grow. Investing in People and Strengthening Governance CDNetworks supported employees through structured onboarding, mentorship, leadership development, and workplace well-being initiatives, with women holding 43% of management positions in 2025. The report also outlines the company's board-level ESG oversight and compliance training for its employees. "As demand for digital infrastructure continues to grow, sustainability must be embedded in how networks are designed, operated, and scaled," said Antony Li, Global Head of Infrastructure at CDNetworks. "Our 2025 ESG Report reflects our commitment to responsible innovation, from improving infrastructure efficiency to helping customers deliver secure, reliable, and more sustainable digital experiences." About CDNetworks As the APAC-leading network with over 3,000 global Points of Presence and more than 20 years of technology experience, CDNetworks delivers the fastest and most secure digital experiences to end users. Its diverse products and services include web performance, media delivery, cloud security, edge computing, zero-trust security, and colocation services, all designed to spur business innovation. Media Room more 2026-07-08 10:00 2026-06-25 10:00 2026-05-13 10:00 2026-03-25 10:00 2026-02-26 10:00 2026-01-22 10:00 2026-07-20 16:00 2026-07-22 06:30 2026-07-22 06:00 2026-07-21 20:00 2026-07-19 12:30 2026-07-22 06:00