News Briefs

The National Security Agency (NSA) is sounding an alarm about vulnerabilities in a widely used open-source programming language.

PHP — short for PHP: Hypertext Preprocessor — works on most major Internet operating systems.  It runs directly on web servers and can be added into HTML to create dynamic web pages. However, the NSA has identified a set of flaws in PHP, collectively nicknamed “PHP2Shell,” which could be exploited by hackers.

[READ MORE: Comcast Business: 2,500 cybersecurity events occur every second]

According to the NSA, PHP2Shell vulnerabilities could allow attackers to take control of affected web servers without prior access or authentication and then steal sensitive data, disrupt services, or move deeper into a network.
“It will be critical in the coming weeks to maintain heightened awareness of your Internet-facing devices and services that are reliant on PHP,” the NSA said in an official advisory. “It is essential for all to prioritize incorporating vendor patches that may be explicitly tied to the PHP2Shell issues.”

The non-profit PHP Foundations released an open-source patch Wed., Oct. 21 and other software vendors may also issue their own PHP patches. The NSA advises users to conduct an inventory of hardware/software services reliant on now-vulnerable PHP versions and vigilantly monitor and apply patches related to their exposed systems.

Other remedial steps recommended by the NSA include adding enhanced logging within network/operational environments and replacing end-of-life PHP services which will not be compatible with patching. If an immediate update is not feasible, the NSA recommends that organizations take any exposed systems offline until PHP vulnerabilities can be fully mitigated.

Information on the latest mitigations and patching guidance is available on the PHP.net Security Advisory page.

[READ MORE: Diesel parent OTB Group to leverage Google Cloud virtual try-on]

JCPenney is expanding its partnership with one of the most popular holiday multi-city concert tours, the iHeartRadio Jingle Ball.

For the second consecutive year, the department store retailer is launching the iHeartRadio Jingle Ball x JCPenney Collection. The limited-edition capsule line features festive fashion and “statement-making” styles for women, men and kids.

In a new addition this year, Penney, iHeartRadio and recording artist Bella Kay have teamed up. Kay designed a collection of exclusive custom patches that bring the spirit of the limited-edition collection to life, according to Penney. Fans can collect the limited-edition designs at select tour stops and through special JCPenney experiences throughout the season.

Beyond the collection, shoppers can also enter a sweepstakes that will run through December 20. Prizes include a flyaway trip to an iHeartRadio Jingle Ball concert, VIP concert access, a meet and greet with Kay, JCPenney gift cards, and signed merchandise. 

Penney is offering members of its free rewards program the opportunity to unlock an exclusive backstage experience with Bella Kay at a select iHeartRadio Jingle Ball tour stop.

“Jingle Ball brings people together through the music and artists they love, and this year, we’re giving fans even more ways to be part of it,” said Marisa Thalberg, executive VP, chief customer and marketing officer at Catalyst Brands. “From exclusive backstage experiences with Bella Kay for JCPenney Rewards members to a fashion collection that brings concert energy to the holidays, we’re making it easier for more people to join in. At JCPenney, we believe everyone deserves a better deal, especially during the holidays, and we’re proud to make great fashion and these special experiences more accessible for families everywhere.”

MillerKnoll Inc. has appointed a company veteran as chief executive.

The furniture maker and retailer named Jeff Stutz as CEO and board member, effective immediately. He has served as interim chief since June 2025, succeeding Andi Owen, who retired as “mutually agreed" upon with the board. Owen, who led the company since 2018, made headlines in April 2023 after footage surfaced from a Zoom meeting in which she told employees worried about not receiving bonuses to “leave pity city.”

Stutz joined MillerKnoll in 2001. Prior to being named interim chief, he served as COO from September 2025 to June 2026. Before that, he was CFO of the company for more than 10 years after holding several financial leadership roles.

“Jeff brings deep institutional knowledge, broad industry experience, and a proven record of leadership at MillerKnoll, and the board has full confidence in his ability to drive long-term shareholder value," said John R. Hoke III, chairman. "As interim CEO, Jeff has made an immediate and meaningful impact by driving stronger operating income, margins and earnings."

Hoke said that Stutz’s appointment came after a “rigorous search process.”

"This is a pivotal time for MillerKnoll, and I am energized by the opportunity to continue working with our talented teams and iconic brands across the company as we focus on elevating our performance and creating long-term value," said Stutz. "Serving as interim CEO over the past few months, I have been working even more closely with our teams, customers and partners around the globe, reinforcing my conviction in our strengths and upside potential.”

Torrid Holdings Inc. will soon see a change in its C-suite.

The larger-size young women’s fashion retailer said that CFO Paula Dempsey has resigned to “pursue another opportunity.“  Dempsey will remain in the role through mid-November to ensure a smooth transition.

Torrid has appointed Will Langley as interim CFO, effective Oct. 28. Langley brings with him 20 years of experience at department store retailer Belk where, most recently, he served as finance chief from January 2020 through May 2025. Before that, Langley held a series of finance roles of increasing responsibility at Belk.

Torrid is led by Lisa Harper, who took the reins in 2022. Prior to that, she served as CEO of Belk, from 2016 through 2021.

“I am excited to welcome Will to Torrid,” stated Harper. “He is a seasoned finance leader whose breadth of experience and strategic contributions at Belk make him well suited to guide our finance organization. Having worked with Will for many years, I look forward to the perspective he will bring to Torrid as we continue to execute on our priorities.”

In comments, Dylan Carden, an analyst with equity research firm William Blair,  said that Langley’s background could prove “particularly relevant as Torrid moves beyond its store optimization efforts and shifts more of its focus toward improving profitability, managing inventory, and strengthening cash flow against a still-challenging retail backdrop.“

He added that Langley’s experience managing liquidity, debt and financial restructuring should also bring a useful perspective as Torrid looks to maintain financial flexibility while executing its turnaround, which is in its early stages.

First Citizens Bank is expanding its accessibility ahead of the holiday season by partnering with a major retailer.

The bank is teaming up with ATM solutions provider NCR Atleos to provide its customers with surcharge-free access to ATMs at more than 2,000 Target stores. First Citizens Bank customers may use their debit card at ATMs in Target locations to access essential banking services, including withdrawing cash, checking account balances and transferring funds between eligible linked accounts, without paying a surcharge fee at participating locations.

First Citizens Bank says the expanded network at Target stores is the latest in a series of investments in the “client experience.”

[READ MORE: First Look: Target’s Bridgehampton store has elevated design — but no red]

"Supporting our customers’ long-term financial well-being is at the heart of what we do, and that commitment guides how we make banking services accessible,” said Michael Wilson, head of wealth and consumer banking at First Citizens Bank. "The consumer banking experience needs to meet customers where they are through multiple channels, whether in-person or digitally enabled. Having in-store accessibility is a practical extension of the convenience and service our customers expect from First Citizens."

Headquartered in Raleigh, N.C., First Citizens Bank operates more than 600 branch locations across more than 20 states.

Target operates more than 2,000 U.S. stores, in addition to its e-commerce business. The retailer is continuing to expand its store network, and plans to open eight stores this fall across six states.