Latest news
-
Vulnerabilities via Dark Reading
'PHP2Shell' Bugs Signal Red Alert for Security Industry
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
-
Vulnerabilities via Canadian Centre for Cyber Security
Cisco security advisory (AV26-1073)
Serial number: AV26-1073 Date: October 21, 2026 As of October 21, 2026, Cisco is affected by vulnerabilities in the following products: Cisco IOS XR Software Release…
-
Vulnerabilities via TechCrunch
The internet is having a very bad cybersecurity day
From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.
-
AI Security via ransomware.live
🏴☠️ Silentransomgroup has just published a new victim : Porter Hedges LLP
[AI generated] Porter Hedges LLP is a full-service business law firm based in Houston, Texas, United States. It operates in the legal services industry, providing…
-
Vulnerabilities via The Hacker News
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software…
-
Vulnerabilities via Flashpoint
The Missing Layer in Vulnerability Prioritization: Full Visibility Into Your Attack Surface
Table Of ContentsTable of ContentsHow EASM Extends Vulnerability Prioritization to Your Full EnvironmentWhy This Matters More in Regulated IndustriesDiscovery and…
-
AI Security via Malwarebytes Labs
WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
WhatsApp instructed its AI support chatbot not to recommend contacting privacy regulators when users couldn’t delete their accounts, researchers found. Privacy software…
-
Vulnerabilities via Canadian Centre for Cyber Security
ISC BIND security advisory (AV26-1072)
Serial number: AV26-1072 Date: October 21, 2026 As of October 21, 2026, ISC is affected by a vulnerability in the following products: BIND 9 Versions 9.11.0 to 9.18.50…
- Advertisement
-
Vulnerabilities via Simon Willison
Today's PHP Security Release, and How We're Strengthening PHP Security
Today's PHP Security Release, and How We're Strengthening PHP Security If you're running anything on PHP it's vital you upgrade - today's updates (across the entire PHP…
-
Vulnerabilities via BleepingComputer
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.
-
Vulnerabilities via Canadian Centre for Cyber Security
Oracle Corporation security advisory (AV26-1071)
Serial Number: AV26-1071 Date: October 20, 2026 As of October 20, 2026, Oracle Corporation is affected by vulnerabilities in the following products: Helidon JD Edwards…
-
Threat Intel via The Record
Democrat lawmakers say Russia is aiming to undermine party ahead of midterms
The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infrastructure…
-
Threat Intel via Microsoft Security
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
What’s happening What is ARTEX? Mitigation and protection guidance References Learn more As early as September 2026, Storm-0940, a China-state aligned actor, used the…
-
Vulnerabilities via Ubuntu Security
USN-8951-1: c-ares vulnerabilities
It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of…
-
AI Security via Citizen Lab
Citizen Lab Director Slams Trump Administration, ‘Techno-Fascist’ Executives
Director Ron Deibert spoke to a crowd in his keynote address at SecTor 2026, warning that the threats that the Citizen Lab investigates are being “super-charged” thanks…
-
Threat Intel via The Hacker News
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to…
-
AI Security via TechCrunch
PHP armageddon: OpenAI, Google’s Wiz find ancient holes, panicking the internet
This is the kind of security issue that was found and prevented by AI, but is also a high risk because of AI.
-
Breaches via ransomware.live
🏴☠️ Helix has just published a new victim : Westrock Coffee
Westrock Coffee records. Yearly revenue ~$1.2 billion yearly. GoFile links and passwords unlock in 24 hours.
-
Breaches via Ubuntu Security
USN-8947-1: NSS update
This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificate due to intermediate CA certificates being compromised.
-
Vulnerabilities via Canadian Centre for Cyber Security
AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619
Number: AL26-026 Date: October 21, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently…