A security release for two critical PHP vulnerabilities was published on cyber.gov.au on 22 October 2026. 

Patches have been released to address the two critical vulnerabilities affecting PHP, a widely used technology that underpins many websites and web applications.

If you have a website, check that the software supporting it is up to date and protected against the recently identified critical PHP security issue. If you are unsure whether your website uses PHP or is affected, contact your web hosting provider or the person who manages your website and ask them to confirm what action they have taken.

If you suspect you’ve been impacted or require advice and assistance, contact 1300 CYBER1 (1300 292 371).

Further information with the latest PHP guidance can be found at https://www.php.net/index.php.

To stay on top of security releases, review cyber.gov.au and sign up for alerts.

In response to feedback from tax agents, trustees and electing entities the ATO are extending GIC remission until 30 June 2027. They encourage you to act promptly if your clients want to be eligible.

Although 31 October falls on a weekend, you must lodge your clients’ overdue prior returns and add new clients to your client list by that date – not the next business day. Don’t miss the deadline or they won’t receive your lodgment program due date for their 2026 tax return.

It can take up to 3 weeks for the due date to update on ATO systems after you’ve lodged your clients’ prior year returns. You don’t need to request lodgment deferrals for their 2026 tax returns in the meantime.

Find out about the market valuation requirements under the capital gains tax (CGT) reform.

Learn how capital gains tax (CGT) changes announced in the Budget may apply to the sale or disposal of your assets.

The ATO will continue accepting credit card payments for tax obligations until 30 June 2027.

Help your employer clients understand when private use of work cars attracts fringe benefits tax (FBT).

The most common errors the ATO see when it comes to rental deductions and how you can support your clients to get it right.

Access the new form for notifying the ATO of non-indirect Australian real property interest vendor declarations and guidance to help your clients meet their obligations under the new rules.

Check out these top tips for setting up your myID on a new device. Following these steps can help you or your clients maintain seamless access to our online services.