Latest news
-
AI Security via The Record
PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024
In a lengthy statement about two critical vulnerabilities, the PHP Foundation explained how one dated to 2024, how a recent third-party review by AI companies heightened…
-
AI Security via UpGuard
The Domain Drop Race: How an AI-Powered Squatting Pipeline Hunts Expiring Names | UpGuard
Inside an automated pipeline that scored millions of expiring domains and made 579,533 registrar calls. See how domain squatters target lapsed names.
-
Threat Intel via Halcyon
BYOVD Attacks: How Attackers Turn Signed Drivers Against Your EDR
Threat actors favor vulnerable drivers for bypassing security controls to create a shell, execute malware, and for persistence because they run with kernel-level…
-
Vulnerabilities via Cisco PSIRT
Vulnerabilities in PHP Affecting Cisco Products: October 2026
On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM…
-
Ransomware via Halcyon
Ransomware Shuts Down 158-Year-Old UK Logistics Firm
One weak password, one ransomware attack, 700 jobs gone. What KNP’s collapse shows about why ransomware recovery decides whether a business survives.
-
AI Security via SecurityWeek
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.
-
Threat Intel via Google Security Blog
Chrome Now Warns Before Insecure HTTP Connections
As promised last year, we have now rolled out a change where Chrome explicitly asks users for permission before making an insecure HTTP connection. Earlier this year we …
-
Vulnerabilities via Ubuntu Security
USN-8950-1: poppler vulnerability
It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use this issue to…
- Advertisement
-
Vulnerabilities via SecurityWeek
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications.
-
Threat Intel via Dark Reading
OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
-
Vulnerabilities via Wordfence
PSA: PHP Security Updates Available for Two Critical Vulnerabilities, Update Now
The PHP project has released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that can allow…
-
Breaches via HIPAA Journal
Jefferson County Health Department Pays $2.25M to Settle Data Breach Lawsuit
Jefferson County Health Department, a public health agency for Jefferson County in Hillsboro, Missouri, has agreed to settle class action litigation that was initiated…
-
AI Security via The Hacker News
OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested…
-
Breaches via Horizon3.ai
Audit-Ready Isn’t Attack-Ready.
Passing an audit and surviving an attack are two different tests. An audit can establish whether an organization meets defined requirements, including requirements for…
-
Ransomware via RansomLook
Flextron Circuit Assembly By akira
Flextron Circuit Assembly specializes in quick-turn prototype PCB manufacturing and assembly, offering a comprehensive range of services including design, fabrication…
-
AI Security via BleepingComputer
OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as…
-
AI Security via Simon Willison
Panache — RTS Belle Époque pour mobile
Panache — RTS Belle Époque pour mobile Well this is delightful: I released Battle Drones yesterday under an Apache 2.0 License and there's already a French language fork…
-
Vulnerabilities via Malwarebytes Labs
PHP2Shell: Why websites are going offline for emergency security updates
If you’ve encountered websites in maintenance mode today, it may be a security precaution. Reports of attacks targeting two critical PHP vulnerabilities have prompted…
-
Breaches via HIPAA Journal
HHS Sends Letters of Nonconformity to Suspected Information Blockers
The U.S. Department of Health and Human Services (HHS) Office of the National Coordinator for Health IT (ONC) has sent warning letters to seven health IT companies…
-
Vulnerabilities via Ubuntu Security
USN-8930-2: U-Boot vulnerabilities
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and…