Morning Briefing
A critical vulnerability in PHP — one of the internet's most widely-used programming languages — has triggered a rare global cybersecurity emergency, with AI tools accelerating the discovery of long-buried flaws and leaving IT teams scrambling around the clock. If your stack touches PHP (and a huge chunk of the web does), this is not a drill.
What Matters Today
- PHP vulnerability sparks global cybersecurity scramble: AI uncovered deep-seated flaws in PHP, prompting an urgent worldwide patching effort. Cybersecurity leaders are warning of a coming "vulnerability tsunami" as AI-assisted hacking matures — this one's a preview of what's coming. BBC Tech
- Helen Haines attack shakes Australian politics: The alleged violent attack on independent MP Helen Haines has horrified the country and reignited debate about the dangerous environment facing politicians — particularly women. The Greens are also under pressure over unrelated misconduct allegations against Jordon Steele-John as Senate estimates looms. Guardian AU
- Snowy Hydro 2.0 blowout hits $25 billion: What started as a $2bn project is now costing 12 times the original estimate. Chris Bowen is calling it one of the most complicated engineering projects in the world — others are calling it a cautionary tale for big government infrastructure bets. Guardian AU
- Israel launches collective punishment in Hebron: After two soldiers were killed near a checkpoint, Netanyahu ordered demolitions and forced displacement in Hebron. The escalation is drawing sharp international condemnation and raising war crimes concerns. BBC World
- Ukraine-Starlink gap widens: Despite Trump claiming Starlink restrictions have been lifted, Ukraine says access remains limited. The good news: Kyiv has been quietly adapting its drone warfare to reduce Musk-dependency — a strategic hedge that's now paying off. Ars Technica
- Peres Jepchirchir provisionally banned for EPO: The Kenyan who won this year's Sydney Marathon by a jaw-dropping three minutes has tested positive for EPO. Awkward timing for Athletics Australia and the race organisers. ABC News
- Victoria's auction reserve price transparency law is live: Buyers in Victoria can now see a home's reserve price before auction — a significant shift that could ripple nationally. Worth watching whether it actually cools the information asymmetry that's long favoured vendors. Guardian AU
Markets
It's a sea of red outside the ASX, which held up relatively well at +0.34% — but Wall Street got hammered, with the NASDAQ shedding 3.64% and the Nikkei dropping a matching 3.58%, likely on a cocktail of tariff anxiety, tech sector rotation, and risk-off sentiment. The AUD slipped to 0.704 against the USD (-1.03%), which will sting on imports but gives exporters a slight edge. Gold had a brutal session, tumbling 7.2% to just over $4,000 — an unusual move for a safe haven that suggests forced selling or a broader deleveraging event. Crypto wasn't spared either: Bitcoin fell to $81,309 and Ethereum took a harder hit at -10.66%, breaking below $2,400.
Worth a Read
- What is PHP and why did it spark a global cyber-security scramble? — BBC Tech's explainer is genuinely useful even if you're not an infosec person. The fact that AI is now surfacing decades-old bugs at scale is the real story here, and it has major implications for every organisation running legacy code (so, everyone). BBC Tech
- Ukraine learns to fight without Starlink as Musk plays politics with satellites — A fascinating deep-dive into how Ukraine has re-engineered its battlefield tech around Starlink uncertainty. It's part war reporting, part product management case study in building resilient systems under pressure. Ars Technica
- Switch 2 security takes a hit as hackers unlock homebrew access — Only weeks after launch, the Switch 2 has its first userland exploit via an integer overflow in SmileBasic. The homebrew scene moves fast — this will be a cat-and-mouse game Nintendo has played before and never quite won. Ars Technica
- Snowy Hydro 2.0 is costing $25bn – 12 times more than its initial estimate — A long read but essential if you care about Australia's energy transition. The cost blowout is staggering, and the political fallout is only just beginning. Good context for any debate about government-led versus market-led infrastructure. Guardian AU