October 26, 2026 in review

Day in review: Anthropic files for IPO, Israel nears election, deadly drone attack hits Voronezh

1. PHP flaws spark precautionary service suspensions worldwide as hacking attempts surge

   What happened

   Governments and companies temporarily suspended online services on October 21 and 22 while addressing two critical PHP vulnerabilities. Cloudflare reported a rapid increase in exploitation attempts.

   What changed today

   • A UK deputy minister said about 50,000 alerts were sent to organisations and described government service interruptions as precautionary.
   • A German report said many disconnected websites were back online after being secured, with no federal websites hacked.
   • Reporting from Bosnia and Herzegovina highlighted the absence of a state-level incident response team; CERT Republika Srpska reported exploitation attempts.

   What is confirmed

   • Confirmed PHP2Shell comprises CVE-2026-109618 and CVE-2026-109619; successful exploitation could allow unauthenticated remote code execution on vulnerable PHP servers.
   • Confirmed Sources reported that AI helped identify the flaws, which had remained undetected for years; BBC reporting cited Wiz as one of the companies whose researchers found them.
   • Statement by Matthew Prince, Cloudflare chief executive Prince said Cloudflare observed thousands of exploit attempts in the 10 hours before public disclosure, rising to tens of thousands in the next 45 minutes, hundreds of thousands within two hours and millions by the time of his post.
   • Confirmed Japanese companies, including Nomura, Mitsubishi UFJ Financial Group, ANA and East Japan Railway, temporarily suspended some online services as an emergency precaution.

   Unknown or disputed

   • How many systems were vulnerable or successfully compromised, and did any named organisation suffer a breach?
   • Who was behind the exploitation attempts?
   • What was the precise patch release timeline, and how many suspended services remain offline?

2. Brazil extends runoff voting by two hours amid transport disputes

   What happened

   Brazil extended presidential runoff voting by two hours on October 25 after requests linked to transport disruptions and severe weather. Lula subsequently defeated Flávio Bolsonaro and won a fourth term.

   What changed today

   • Justice Cristiano Zanin ordered an official voting close of 19:00.
   • Both campaigns sought extra voting time, citing different obstacles to reaching the polls.
   • Accounts left unresolved how the extension applied to polling places that had already closed.

   What is confirmed

   • Confirmed The Lula campaign asked the Supreme Court and the Superior Electoral Court to act over transport disruptions affecting voters in several states.
   • Confirmed Both candidates sought an extension, but Flávio Bolsonaro’s request concerned municipalities affected by heavy rain and storms in Minas Gerais, Rio Grande do Sul, Paraná and Santa Catarina.
   • Statement by The Workers’ Party (PT) The PT said municipal officials opposed to Lula had failed to provide free public transport operating at full capacity as required by the electoral court; its request concerned São Paulo, Alagoas, Pernambuco, Roraima, Piauí, Paraíba, Pará, Paraná and Rio de Janeiro.

   Unknown or disputed

   • How many voters could not reach polling places, and did the disruptions or extension affect turnout or the result?
   • Which polling stations were covered, particularly those that closed before receiving notice?

3. Anthropic files public IPO paperwork and plans Nasdaq listing under ANT

   What happened

   Anthropic made its IPO registration filing public on October 26 and plans to list on Nasdaq under ANT. The prospectus showed rapid revenue growth alongside an $80.7 billion first-half loss.

   What changed today

   • Anthropic's public registration filing set out plans for a Nasdaq Global Select Market listing.
   • The share count and price range remained undisclosed.
   • Reports differed over whether the fundraising target was up to or more than $100 billion.

   What is confirmed

   • Confirmed Anthropic publicly filed a Form S-1 with the U.S. Securities and Exchange Commission for a proposed offering of Class A common stock.
   • Confirmed Anthropic plans to list on Nasdaq under the ticker ANT; the number of shares and price range have not been set.

   Unknown or disputed

   • What will the final offering size, share price, valuation and trading date be?
   • Is Anthropic targeting up to $100 billion or more than that amount?
   • Do the reported compute-spending totals cover comparable contracts and periods?

4. Voronezh drone attack kills two, governor says, as train passengers among 17 hurt

   What happened

   Drones attacked Voronezh overnight into October 26. Governor Alexander Gusev said two people were killed and 17 injured, most of them passengers on a suburban train hit by falling drone debris.

   What changed today

   • Gusev reported two deaths, 17 injuries and two people in critical condition.
   • Russian Railways said debris damaged a carriage on an Anapa-to-Moscow train and regional rail services were temporarily suspended.
   • Fires were reported at industrial sites and a city-centre business building.

   What is confirmed

   • Confirmed Drones attacked Voronezh overnight into 26 October 2026.
   • Statement by Alexander Gusev, governor of Voronezh Region Gusev said most of the injured were on a suburban train hit by debris from a downed drone; Euronews reported that two were in critical condition. Index.hr reported five injured passengers, two seriously injured.
   • Statement by Russian Railways (RZD) RZD said debris damaged a carriage of train No. 11 travelling from Anapa to Moscow, and rail services in the region were temporarily suspended.
   • Statement by Alexander Gusev, governor of Voronezh Region Gusev said Russian air defences shot down more than 70 drones over Voronezh and 113 over the region.

   Unknown or disputed

   • Who launched the drones? Ukrainian authorities had not claimed responsibility in the cited reports.
   • Which facilities were hit, and what damage can be independently verified?
   • Where did the deaths occur, and what was the full extent of damage to trains and buildings?

5. Netanyahu and IDF chief reported in dispute over Iran directive on election eve

   What happened

   Israeli media reported a confrontation between Benjamin Netanyahu and military chief Eyal Zamir over Iran-related directives before the election. Netanyahu denied that the two were in crisis over Iran, while reports differed over what the instructions required.

   What changed today

   • Channel 12 reported that Zamir sought further deliberations and signed documents establishing the directives' legal basis.
   • Open Magazine described a new attack on Iran as speculation; Manset Haber reported that Netanyahu wanted new strikes.
   • Netanyahu denied a crisis with Zamir over Iran.

   Unknown or disputed

   • What did the directives require, and was any attack formally ordered or authorised?
   • Did the reported confrontation amount to a crisis between Netanyahu and Zamir?
   • Did the Palmachim discussion take place on October 25 or 26?

6. Israel heads to October 27 election with polls pointing to a deadlock

   What happened

   Israel heads into its scheduled October 27 parliamentary election with polls suggesting neither Netanyahu's bloc nor the opposition will secure a majority. A KAN poll projected 52 opposition seats and 50 for Netanyahu's bloc.

   What changed today

   • Pre-election polling pointed to neither main bloc reaching the 61 seats required for a majority.
   • The KAN projection left the remaining seats with unaffiliated parties, including Arab-led lists.

   What is confirmed

   • Confirmed Israel elects 120 Knesset members through nationwide proportional representation; parties need at least 3.25% of the vote to enter parliament.

   Unknown or disputed

   • What will the election result and turnout be?
   • Will either bloc secure a majority, and what coalition can be formed?
   • How will seats be distributed among parties outside the two main blocs?