PHP's emergency releases for two critical flaws, ChatGPT Ads reaching 89 countries, and Walmart's Agent Gateway for approved AI shopping agents
Today's 3 verified stories: the PHP team released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical flaws that can allow remote code execution without authentication, both rated 9.2 on CVSS v4.0. OpenAI announced that ChatGPT Ads is expanding to 26 more countries, bringing availability to 89, with ads shown only on the Free and Go plans. Walmart announced Agent Gateway, an MCP server that lets approved AI agents search Walmart and Sam's Club online inventory and buy on a shopper's behalf. The detailed look at each story, its sources and what it means for your business lives on its own page.
PHP ships emergency patches for two critical flaws that allow unauthenticated code execution
On October 21, 2026 the PHP team released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical flaws that can allow remote code execution without authentication. CVE-2026-109618 and CVE-2026-109619 are both rated 9.2 on CVSS v4.0, and mod_php carries the highest risk. Cloudflare says the flaws leaked before the official date and that it saw attack traffic; it switched on default WAF rules about nine hours before public disclosure. PHP says interim mitigations do not make an installation safe and only updating is a complete fix. Search Engine Roundtable reports that Google's John Mueller advised sites taken down for patching to return HTTP 503.
OpenAI opens ChatGPT Ads in 26 more countries, reaching 89
On October 21, 2026, OpenAI announced that ChatGPT Ads is expanding to 26 more countries, bringing availability to 89. The company says more than 100,000 advertisers have run campaigns since ads launched. New markets include 14 Latin American countries such as Argentina, Chile, Colombia and Peru, plus Nigeria, South Africa, Serbia, Ukraine, Cambodia, Bangladesh and Pakistan. Ads appear only on the Free and Go plans. Separately, creative enhancements switch on by default for self-serve campaigns. The help page gives October 29 as the start and the email quoted by Search Engine Roundtable gives October 30. Advertisers can change the setting in Ads Manager.
Walmart opens its Agent Gateway to approved AI shopping agents
On October 21, 2026, Walmart announced Agent Gateway, an MCP server that lets approved AI agents connect to the retailer. Through it, agents can search Walmart and Sam's Club online inventory and buy on a shopper's behalf. Agent Profiles, rolling out next month, give each agent a dedicated profile in the customer's account, with approval for every transaction or a spending limit. No Walmart+ membership is needed. Under Walmart's terms, agents cannot access payment information, and agents that break the terms are blocked from the site. TechCrunch contrasts the move with Amazon's recent decision to start blocking AI agents from buying for shoppers.
The agenda moves fast, the system stays calm.
Let us talk about what these shifts mean for your business and work out together which step fits you.