Critical PHP vulnerabilities expose vast majority of websites to potential compromise
The serious flaws in popular website software prompted government agencies to urge organizations to take their sites offline until they could be fixed. Source link
Month: October 2026
Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities
Update, 10/21/2026, 9:55 a.m.: The patches have been released, with fixes shipped as versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35, covering the supported branches, 8.2 through…
WordPress sites compromised after TeamUpdraft credential exposure
Some backdoor variants can create privileged accounts or authenticate as existing administrators, while others are designed to evade detection in WordPress’s standard administrators screens. Revoking…
Resilience reports energy and utilities sector faces rising cyber exposure from ransomware, vulnerable OT systems
Resilience’s analysis of cyber insurance claims in the energy and utilities sector found that email compromise accounted for 21% of claims filed between Jan. 1,…
Singapore’s CSA and Google identify safeguards and access controls to address autonomous AI agent risks
The Cyber Security Agency of Singapore (CSA) and Google convened cybersecurity policymakers, critical infrastructure leaders and artificial intelligence safety experts at the Singapore International Cyber…
How Commerce.com and Cloudflare are getting storefronts ready for AI agents
AI can write code and pass the bar exam, but it still struggles to buy a pair of shoes online. That’s because websites were built…
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers
Legitimate infrastructure has become a powerful delivery mechanism for attackers, carrying the inherent trust they once had to build. As Cisco Talos explored in our…
Tenable: Single multilingual model, native detection in 10 languages
AI security tools that can only detect threats in English offer limited protection. Here’s how Tenable trained our threat detectors to process nine additional languages…
Expanding the digital evidence trail.
This week, Dave and Ben look at two court cases where one involves a judge ruling that law enforcement’s use of Flock cameras was unconstitutional…
Microsoft PowerToys adds CursorHide, Button Lock mouse tools
Microsoft has released PowerToys 0.102, with two new mouse utilities, new command-line tools, and Command Palette improvements. Mouse Button Lock, one of the new mouse…
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
“If you had asked us beforehand, we would have guessed that gathering these would take real effort,” the researchers wrote. “It took one query.” In…
Gentlemen Ransomware Hackers Hijack Legitimate Lenovo Drivers to Disable Security Software
The Gentlemen ransomware operation is abusing legitimate Lenovo and Safetica kernel drivers to terminate security software, weakening endpoint defenses before encryption. Acronis Threat Research Unit…