Patching Apache is quick. Working out what that box could reach is slower. The Hacker News reports CVE-2026-119618 in mod_http2 allows unauthenticated code execution on Apache 2.4.55 to 2.4.70, fixed in 2.4.71. It also reports 4,837 hijacked GitHub accounts ran a CI secret stealer in 1,806+ repos. The Crypto Times reports Unocoin froze logins as 81,000 wallets show $0.
Patch, disable HTTP/2 where unused, and we can inventory your fleet, review what the web tier reaches. Send us your versions.