Oct 27, 2026
Ivan Jenkins
Co-Founder
Security
A critical PHP vulnerability was disclosed on 21 October 2026. We patched every public-facing M2North service within 24 hours with no downtime, and a log audit found no exploit attempts and no data exposure.
On 21 October 2026, a critical vulnerability was disclosed in PHP, one of the core technologies that runs a large share of the internet, including parts of M2North. We patched every affected M2North service within 24 hours of the disclosure, with no service interruption. A forensic audit of our logs since then found no exploit attempts, no unauthorised access and no exposure of client data.
We emailed our clients about this on 27 October. We are publishing it here as well, because how a platform handles a security incident is something buyers and suppliers should be able to check, not just take on trust.
The vulnerability allowed unauthenticated remote code execution. An attacker who could reach an exposed PHP service could run their own code on it without logging in, using specially crafted web requests. Vulnerabilities of this class are among the most serious there are, and this one affected services across the industry, not only ours.
Our threat monitoring picked up the advisory as soon as it was released, and our engineering team started work straight away.
We then audited our logs from 20 October onward, the day before the disclosure. The audit confirmed:
No action is needed from anyone who trades through M2North.
If you trade through M2North, our security is part of your security. Purchase orders, invoices and payment data pass through the platform every day, so you should know how we respond when something goes wrong across the industry, not only that we hold the right certificates.
Fast detection and response is what our independent CyberVadis assessment measured us strongest on, with a score above 950 out of 1000. This incident is that capability at work. M2North is also ISO/IEC 27001:2022 certified.
If your IT or security team needs more detail for its own records, contact our security team at support@m2north.com or on +27 11 856 2000.
Aug 31, 2026
Ivan Jenkins
Co-Founder
Security
M2North scored 809/1000 in an independent CyberVadis cybersecurity assessment — above the benchmark in every area assessed — earning a Silver medal for 2026.
Sep 10, 2026
Brett Misselhorn
General Manager
Newsletter
The Trust Update for August 2026: an NPS of 9.0 from 268 independent client reviews, 1,222,731 documents exchanged across the network, 39,300 pages processed by our AI at 95%+ extraction accuracy, ISO 27001 certification and a CyberVadis Silver medal.
Nov 4, 2026
Carlos Faria
Strategist
Supply Chain
The problem in agriculture is not always production. Many losses are failures of coordination, not effort. What changes when information flows back from consumers to farmers, and businesses make better decisions together?
See how M2North turns these ideas into practical workflows.