Latest news

Advertisement
  1. Threat Intel via Dark Reading

    Optiv Launches CyberBOT Cybersecurity Awareness Training Program

    Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient…

  2. Vulnerabilities via Ubuntu Security

    USN-8949-1: Ghostscript vulnerabilities

    Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were…

  3. Vulnerabilities via Chrome Releases

    Dev Channel Update for ChromeOS / ChromeOS Flex

    The ChromeOS Dev channel is being updated to OS version 16852.6.0 (Browser version 157.0.8103.7) for most ChromeOS devices. If you find new issues, please let us know…

  4. Vulnerabilities via Ubuntu Security

    USN-8948-2: PHP vulnerabilities

    USN-8948-1 fixed vulnerabilities in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. This provides the corrosponding updates in Ubuntu 14.04 LTS…

  5. Breaches via Dark Reading

    Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk

    360 Privacy finds more than 8 in 10 security and wealth professionals say cybersecurity and physical security can no longer be separated.

  6. Vulnerabilities via Krebs on Security

    Widespread PHP Flaw May Cause Many Site Outages Today

    Expect to see quite a few websites serving error pages today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that…

  7. Vulnerabilities via Rapid7

    CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

    OverviewOn October 21, 2026, the PHP project announced security releases for two critical vulnerabilities in PHP. CVE-2026-109618 can corrupt memory during out-of-memory…

  8. Vulnerabilities via Kaspersky Securelist

    Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

    Vulnerability overview On October 20, 2026, the PHP security team published a preliminary notice regarding an upcoming emergency release that addresses two critical…

  9. Advertisement
  10. Vulnerabilities via Cisco Talos

    Two critical RCEs in PHP core

    Cisco Talos is tracking the disclosure of two unauthenticated remote code execution (RCE) flaws in PHP core, dubbed “php2shell”, triggered by a plain HTTP request and…

  11. Ransomware via ransomware.live

    🏴☠️ Akira has just published a new victim : Flextron Circuit Assembly

    Flextron Circuit Assembly specializes in quick-turn prototype PCB manufacturing and assembly, o ffering a comprehensive range of services including design, fabrication…

  12. Ransomware via ransomware.live

    🏴☠️ Akira has just published a new victim : Cascade Flooring America

    Cascade Flooring America is a flooring store located in Vancouver, WA, offering a wide range of products including flooring, furniture, window coverings, and kitchen and…

  13. AI Security via SecurityWeek

    ‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

    Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold.

  14. Threat Intel via Infosecurity Magazine

    New PhaaS Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity

    Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content designed to…

  15. AI Security via Trail of Bits

    Your AI agent fixed the bug, but what else did it change?

    Today we’re publishing patching-bugs and regression-hunt, two plugins that let engineers delegate patch development and regression checks to agents. Our patching-bugs…

  16. AI Security via Straiker

    CARLIY0S: CyberCartel's AI Attacks on Latin American Banks

    Straiker uncovered how CyberCartel used multiple AI models in CARLIY0S to attack Latin American banks and financial institutions, based on evidence from its own systems.

  17. Vulnerabilities via Horizon3.ai

    CVE-2026-109618 / CVE-2026-109619 | PHP Core Remote Code Execution Vulnerabilities (PHP2Shell)

    CVE-2026-109618 and CVE-2026-109619, publicly referred to as PHP2Shell, are critical vulnerabilities in PHP that can allow unauthenticated remote code execution. PHP…

  18. Ransomware via SecurityWeek

    High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

    Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.

  19. Threat Intel via The Record

    Russian hackers teamed up to wipe data at Ukrainian grain firm

    The Russian state-linked hacking group Sandworm collaborated with another threat actor to carry out a destructive cyberattack against a Ukrainian grain logistics company…

  20. Vulnerabilities via NCSC-NL

    NCSC-2026-0445 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Analytics

    Oracle heeft 33 kwetsbaarheden verholpen in diverse Oracle Analytics-producten, waaronder Oracle Business Intelligence Enterprise Edition en Oracle BI Publisher. In de…

  21. Vulnerabilities via NCSC-NL

    NCSC-2026-0444 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Communications

    Oracle heeft 110 kwetsbaarheden verholpen in diverse Oracle Communications-producten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud…