Find what needs attention.
Build a clear picture of your websites, applications and hosting, including who maintains them. Agree which systems matter most and where an urgent fix needs an owner.
Services · Run
Cyber security.
Practical action, clearly owned.
Security patching and vulnerability remediation for businesses in London, Oxfordshire, Herefordshire, Bristol and Cardiff. Start with the risk in front of you, then put a clearer plan behind it.
Free, no obligation. Reply within one working day.
PHP SECURITY UPDATE ·
We’re currently patching the critical PHP security issue.
CIO Solutions is working with companies to apply PHP security fixes and check their websites and applications following the NCSC alert.
The NCSC warning about the critical security issue affecting PHP covers CVE-2026-109618 and CVE-2026-109619. These vulnerabilities can allow unauthenticated remote code execution under certain conditions. Internet-facing systems should be prioritised.
Which PHP releases contain the fixes?
The PHP project’s 21 October 2026 security release lists 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Use a fixed release on a supported branch, or a vendor package explicitly confirmed to include both fixes. A distribution may backport patches without matching these upstream version numbers.
Temporary mitigations reduce some exposure but do not fully resolve the vulnerabilities. Check the PHP project’s official October 2026 security advisory and your hosting or operating-system vendor’s guidance for the latest instructions.
Advisory checked on 22 October 2026. Patching and any investigation into suspected compromise need to be considered separately.
FROM ALERT TO ACTION
A clear route from risk to remediation.
A security alert often leaves a business with a practical question: who is taking care of this? We help turn that uncertainty into an agreed scope, a named owner and a record of the work.
Plan and apply the fix.
Work with your team, developer or hosting provider to agree access, backups, compatibility checks and the release window. Keep the scope and business impact clear before making changes.
Test the business journey.
Check the functions your business relies on after an update, such as sign-in, enquiries, checkout and integrations. Record what was changed, what was checked and any outstanding work.
Make the next update easier.
Agree ongoing patch ownership, an update routine and a record of remaining risks. Where an ageing application needs more than a patch, set out a practical upgrade or replacement plan.
WHERE WE WORK
Cyber security support across five areas.
We work with companies in London, Oxfordshire, Herefordshire, Bristol and Cardiff. Whether you have an internal IT team, an external provider or several suppliers, we help establish who owns the fix and what needs to happen next.
- London
- Oxfordshire
- Herefordshire
- Bristol
- Cardiff
Bring us the immediate patching problem or a wider concern about maintaining your systems. We agree the delivery approach, access requirements and scope with you.
BEYOND THE IMMEDIATE FIX
Keep security connected to the business.
Technology leadership.
When security work crosses several suppliers or competes with other priorities, our interim and fractional CIO support can help set priorities and accountability.
A maintainable website.
If an ageing platform keeps making updates difficult, our web development service can help you plan a more maintainable site and its ongoing support.
USEFUL TO KNOW
Cyber security questions.
Can you help with the current PHP security alert?
Yes. We are currently carrying out PHP security patching work. Contact us with your website or application details and your hosting provider, if known. We will review the setup, confirm the scope and agree the next step. Please do not send passwords or other credentials through the enquiry form.
Do we need to replace our website?
We start with the existing system. An update may be enough; an older application may need compatibility work or a supported-platform upgrade. We explain the options before agreeing the work.
Can you work with our existing IT team or hosting provider?
Yes. We can help coordinate the work across your team, developer and hosting provider, with clear responsibilities for access, changes, testing and handover.
Where do you work with businesses?
We work with companies in London, Oxfordshire, Herefordshire, Bristol and Cardiff. Tell us where your team is based and what support you need so we can agree how to deliver the work.
What if we suspect the system has already been compromised?
Tell us when you first enquire so the response can be scoped appropriately. Applying a patch does not establish that a system is free of compromise. The NCSC guidance explains when to seek help from an NCSC-assured Cyber Incident Response provider.
LET’S AGREE THE NEXT STEP
Need help with a security patch?
Tell us which website or application is affected, who hosts it and what you know so far. We’ll review the setup and agree a practical scope.
Get a free security check