Latest news

Advertisement
  1. AI Security via JFrog Security Research

    LiteLLM Hijacked Again: Malicious 1.107.0 Wheels Steal Credentials and Load Remote Code

    The JFrog Security Research team identified malicious code in `litellm` 1.107.0, a widely used Python interface and proxy for large language model providers. The payload…

  2. Vulnerabilities via Datadog Security Labs

    PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation

    Learn about the two critical vulnerabilities in PHP dubbed PHP2Shell.

  3. Breaches via Simon Willison

    eMudhra Intermediate CA Compromise

    eMudhra Intermediate CA Compromise This is very, very bad news: The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots…

  4. Threat Intel via CyberScoop

    Philippines-based American pleads guilty to running expansive fraud scheme targeting US servicemembers

    A 45-year-old U.S. citizen pleaded guilty to running a widespread identity theft and fraud scheme that defrauded thousands of U.S. servicemembers and veterans while…

  5. Vulnerabilities via Wordfence

    PSA: Upcoming Critical PHP Security Release

    The PHP security team has issued advance notice of an upcoming critical security release, scheduled for Wednesday, October 21, 2026 at 14:00 UTC (10:00 AM Eastern). The…

  6. Breaches via Cloudflare

    8 eMudhra certificates are compromised. Here's what you need to know

    On October 19, 2026, at approximately 17:00 UTC, Cloudflare became aware that private keys associated with eight eMudhra intermediate certificates were compromised…

  7. Vulnerabilities via Wiz

    Wiz Sensor on GKE. 1-Click Runtime Protection, Now Native.

    Enable native runtime protection for GKE in just one click. The Wiz Runtime Sensor add-on now automates deployment and credential management while delivering…

  8. Vulnerabilities via Debian Security

    DSA-6574-1 php8.4 - security update

    https://security-tracker.debian.org/tracker/DSA-6574-1

  9. Advertisement
  10. Vulnerabilities via Debian Security

    DSA-6573-1 firefox-esr - security update

    https://security-tracker.debian.org/tracker/DSA-6573-1

  11. Vulnerabilities via Debian Security

    DSA-6576-1 bind9 - security update

    https://security-tracker.debian.org/tracker/DSA-6576-1

  12. Vulnerabilities via Debian Security

    DSA-6575-1 nginx - security update

    https://security-tracker.debian.org/tracker/DSA-6575-1

  13. Vulnerabilities via Tenable

    Oracle October 2026 Critical Patch Update Addresses 1209 CVEs

    Oracle addresses 1209 CVEs in its final quarterly update of 2026 with 1295 patches, including 112 critical updates.

  14. Breaches via Dark Reading

    Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys

    Google, Mozilla, Apple, the Go project and others moved swiftly to block the affected certificates from the Indian CA, though it's unclear how the keys were compromised.

  15. Vulnerabilities via Horizon3.ai

    CVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Execution

    CVE-2026-101767 is an unauthenticated SQL injection vulnerability in Oracle E-Business Suite (EBS) that can be chained to achieve remote code execution. Discovered by…

  16. Vulnerabilities via Ubuntu Security

    USN-8944-2: ca-certificates update

    USN-8944-1 updated ca-certificates. This update provides the corresponding changes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS by…

  17. Vulnerabilities via BleepingComputer

    PHP warns admins of two critical flaws, emergency patches coming tomorrow

    The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the…

  18. Vulnerabilities via CERT-EU

    2026-018: Critical Vulnerabilities in PHP

    On 20 October 2026, the PHP foundation announced an upcoming security release addressing two critical vulnerabilities in PHP that could lead to remote code execution…

  19. Ransomware via The Record

    FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024

    The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and…

  20. Vulnerabilities via Chrome Releases

    Chrome for Android Update

    Hi, everyone! We've just released Chrome 156 (156.0.8078.47) for Android. It'll become available on Google Play over the next few days.

  21. AI Security via Chrome Releases

    Stable Channel Update for Desktop

    The Chrome team is delighted to announce the promotion of Chrome 156 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks…