Steve Lee joins Zscaler to lead CXO Advisory for Asia Pacific and Japan. November 2, 2026 Zscaler has a new face leading its conversations with technology leaders across the region. Steve Lee has joined as Head of CXO Advisory for Asia Pacific and Japan, bringing more than three decades of experience across defence, aviation, energy and healthcare technology. His career has been spent in the seat his new audience occupies: running technology and security for organisations that cannot afford to fail. Steve's journey began in 1994 at Singapore's Ministry of Defence, where he spent over twelve years. He started in the Air Plans Department, working on air force simulation technology and on budget and management accounting. He went on to head the Joint Information and Systems Group, covering cyber security and infrastructure, and then led the MINDEF eBusiness Project Office, which drove the ministry's portal and e-services innovation. He later served as Deputy Director in the CIO Office. Long before cyber security became a boardroom topic, he was building it into the foundations of a national institution. In 2006 he moved to the private sector as CIO of Kuok Singapore Limited Group, and in 2009 joined Changi Airport Group as Chief Information Officer. Over the next decade, he led technology for one of the world's most admired airports, and in 2017 his role expanded to Chief Information Officer and Group Senior Vice President for Technology. His influence extended beyond Singapore. He served as Chairman of the World Airport IT Standing Committee at Airports Council International, ACI World, and as President of the IT Management Association Singapore, helping shape how airports and IT leaders think about technology. In November 2019, Steve moved into healthcare as Deputy Chief Executive Officer of IHiS (Integrated Health Information Systems), where he spent two years supporting the technology backbone of Singapore's public healthcare system. In late 2021 he joined SP Group, first as Chief Security Officer for both physical and digital security, and from mid-2022 as Chief Information Officer and Chief Security Officer. At SP Group, which empowers the future of energy, he combined technology leadership with responsibility for protecting critical infrastructure. He also served on the boards of SP Powerassets, Powergas Limited and Singapore District Cooling, and stayed on as an advisor into late 2026. Alongside his executive roles, Steve has given his time to the wider community. He is a Council Member at the Jurong-Clementi-Bukit Batok Town Council, where he co-chairs the Service Excellence Committee and is vice-chair of the Operational Excellence Committee. He sits on the board of National Gallery Singapore as a member of its Audit and Risk Committee, and on the board of Mandai Wildlife Group, where he serves on the Operational Risk and Safety Committee. He is also Managing Director of Prism Solutions (S) Pte Ltd. Few people in the region combine his mix of experience: a CIO and security chief who has run critical systems, and a board member who has asked the hard questions about risk from the other side of the table. In a role built around advising CXOs, that dual view matters. As organisations rethink security, adopt zero trust and balance innovation with resilience, leaders will gain from talking to someone who has carried those responsibilities himself. We congratulate Steve Lee on his appointment as Head of CXO Advisory, APJ, at Zscaler and wish him a rewarding journey ahead. - Advertisement -

Critical PHP2Shell vulnerabilities demand immediate patching. Urgent patching against PHP2Shell RCE flaws CVE-2026-109618 & -109619 is critical to protect 70% of websites from active exploitation and data breaches. Introduction. In October 2026, the cybersecurity community was rattled by the disclosure of two critical vulnerabilities in the PHP programming language - CVE-2026-109618 and CVE-2026-109619 - collectively dubbed "PHP2Shell." These zero-day flaws allow unauthenticated remote code execution (RCE) on PHP servers, affecting all versions from 5.4 onward. Given PHP's presence in approximately 70% of websites, including major platforms like WordPress, Drupal, Magento, and Joomla, this represents a systemic risk to global web infrastructure. The flaws have a high CVSS v4 score of 9.2 due to their severity and ease of exploitation. Leading cybersecurity authorities such as the NSA have issued urgent advisories urging patching or site takedown to prevent unauthorized persistent access. While active exploitation attempts have been detected, the industry must now prioritize swift mitigation to avert large-scale data theft, site outages, and potential infiltration of critical infrastructure. Understanding the PHP2Shell vulnerabilities. The two vulnerabilities stem from use-after-free memory safety issues within PHP's core request handling and error management subsystems. This class of vulnerabilities enables malicious actors to execute arbitrary code before application-level authentication, bypassing traditional security controls. Unlike many prior PHP vulnerabilities, these do not require user interaction or authentication, increasing risk substantially. Targets running PHP as an Apache module (mod_php) are particularly vulnerable due to the runtime environment's exposure. The open-source PHP maintainers responded rapidly, releasing patches for supported versions 8.2 through 8.5. However, unsupported legacy versions, including 8.1 and older, lack updates, forcing organizations to migrate to newer branches to gain protection. Implications and required actions for organizations. The nature of PHP2Shell vulnerabilities underscores several critical implications for security teams and decision-makers: * Urgent Patch Deployment: Applying the released PHP patches (8.5.12, 8.4.27, 8.3.36, 8.2.35) or upgrading unsupported versions is paramount. Lagging behind invites mass exploitation and persistent web shell implants. * Inventory and Exposure Assessment: Comprehensive scans and inventories of all PHP installations and internet-facing servers are crucial to identify vulnerable assets, particularly those running mod_php. * Network and Application Mitigations: While patches are the definitive fix, interim mitigations - such as network segmentation, strict firewall rules, web application firewall tuning, and zero-trust architecture adoption - can reduce exposure. * Monitoring and Detection: Security teams should deploy detection mechanisms focused on indicators of compromise related to PHP2Shell exploit behaviors. Cisco Talos and Zscaler have released SNORT rules and analytics signatures that aid in spotting exploitation attempts and post-exploit activity. * Incident Response Preparedness: Given the active exploitation and the potential for web shells facilitating long-term access, incident response plans should anticipate rapid containment and forensic analysis activities. Broader cybersecurity trends reflected by PHP2Shell. The emergence and disclosure of PHP2Shell highlight several evolving trends in the cybersecurity landscape: * AI-Enhanced Vulnerability Discovery: The flaws were identified through collaboration involving AI-driven tools from OpenAI and Google's Wiz, demonstrating AI's growing role in both defensive discovery and the acceleration of exploit development. * Widespread Ecosystem Impact: Echoing prior crises such as Log4Shell, PHP2Shell's impact on a foundational web technology exemplifies the systemic vulnerabilities proliferating across tightly interconnected open-source ecosystems. * Urgency and Coordination in Response: The swift coordinated response by PHP maintainers, national security agencies, and industry partners signals a maturing cybersecurity posture around critical infrastructure threats. * Legacy Technology Risks: Vulnerabilities rooted in PHP code dating back to 2004 highlight ongoing challenges posed by legacy software and the imperative for continuous modernization. Conclusion. The October 2026 PHP2Shell vulnerabilities represent a severe and complex threat with global ramifications. Their ability to enable unauthenticated remote code execution across a vast portion of the web ecosystem compels immediate, concerted defensive efforts. Security professionals must prioritize patch management, asset inventorying, layered mitigations, and active monitoring to curtail exploitation risks. This incident serves as a stark reminder of the persistent threat surface posed by legacy infrastructure and emphasizes the rising impact of AI in vulnerability dynamics. Proactive and informed security strategies will be essential to safeguard web-facing assets amid an increasingly sophisticated adversary landscape.

Jon Steinbach joins DOW as strategic technical adviser to the CIO. * Jon Steinbach will advise the DOW CIO on emerging technologies * Steinbach has served at the CIA, USSOCOM and the Marine Corps * He previously led VAR Technologies and founded StoneCreek Jon Steinbach, former CEO of VAR Technologies with over three decades of experience across the public and private sectors, has joined the Department of War as strategic technical adviser to the chief information officer. Table of Contents DOW CIO Kirsten Davies announced the appointment Friday, saying Steinbach's background in national security and private sector innovation will benefit both her team and the warfighters it serves. What will Steinbach do at DOW? In his new role, Steinbach will advise the CIO on emerging and next-generation technologies, as well as on complex matters where national security, technology and business intersect. Davies, a 2026 Wash100 awardee, said the appointment comes as her office works to speed up the delivery of new technologies to warfighters. "Jon's experience and the unique perspective he gained over more than three decades of work at the intersection of national security, special operations, intelligence, and private sector innovation will be a tremendous asset to the team and to our warfighters," added Davies. Who is Jon Steinbach? Jon Steinbach is a business executive and former national security official whose career spans over three decades of building teams, growing companies and supporting strategic and operational capabilities in government and industry, according to DOW. Before joining the department, he served as CEO of VAR Technologies. He also founded StoneCreek, a firm through which he counseled tech companies, private equity investors and executive leadership teams on growth strategy, value creation and market expansion. Earlier in his career, Steinbach held several positions at the CIA, U.S. Special Operations Command and U.S. Marine Corps. Steinbach said he aims to support the department's digital modernization push, expand its enterprise capabilities and strengthen collaboration with defense industrial base partners. "Maintaining our nation's strategic edge requires a digital foundation that is as agile and resilient as the forces we deploy," he noted. What other appointments & initiatives has the DOW CIO recently announced? The latest appointment follows Davies' earlier move to name Ryan McArthur, former chief technology officer for public sector at Zscaler, special adviser to the CIO for capability development and operational excellence, part of a broader set of leadership additions within the CIO office. In September, Davies issued an instruction establishing departmentwide policy for modernizing and managing software to speed up the delivery of warfighting capabilities, including the creation of the DOW Enterprise Digital Arsenal. In July, she set policy, responsibilities and procedures for IT category management across the department. In June, Davies directed the migration of combatant command common use IT services to the Defense Information Systems Agency, the department's single-service provider. Earlier in the year, she told lawmakers that DOW plans to consolidate enterprise IT and cyber programs under her authority to support warfighter readiness.