What to do as critical PHP flaws puts millions of websites at risk
Two critical vulnerabilities in PHP – the server-side language behind much of the public web – allow unauthenticated remote code execution (RCE) on affected servers.…
Year: 2026
Suntory Oceania taps Databricks, Copilot Pro in AI drive
Key points Suntory Oceania is investing in Databricks and Copilot Pro while exploring native agentic options for its SAP core, digital and IT director Matt…
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
Google has announced new Chrome protections against scams and social engineering, including new site warnings, server-side Gemini analysis, and detection of ClickFix commands. The Gemini…
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight Pierluigi Paganini October 21, 2026 OpenAI reveals two cases of AI agents disabling safety…
Weak encryption certificates could have let hackers easily spoof websites
Major web browsers blocked the eMudhra TLS certificates to prevent them from being weaponized. Source link
DOJ escalates fight for election supremacy with California raids
A series of federal raids and arrests of voters in California has escalated the Trump administration’s ongoing efforts to take administrative control of U.S. elections.…
Hackers heat fridges at major French supermarkets, spoiling food
Hackers raised the temperature of refrigerators and freezers at hundreds of French supermarkets to as high as 50 degrees Celsius (122 Fahrenheit) overnight, causing fires…
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
Executive Summary Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. Both are remote code execution (RCE) vulnerabilities rated as 9.2…
Google, Mozilla revoke eMudhra intermediates after private key compromise
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhra have been compromised, potentially allowing attackers to forge trusted certificates…
Tenable OPEN for AI connects exposure management with threat detection and incident investigations
Exposure management company Tenable Holdings announced expansion of its open technology and partner ecosystem to accelerate integrated security workflows across the entire tech stack. Tenable…
Accenture, Dragos and SANS Institute launch $10 million initiative to strengthen cybersecurity at US utilities
Accenture, Dragos Inc. and the SANS Institute announced a major initiative to help strengthen cyber defenses for under-resourced U.S. water, electric and natural gas utilities.…
Introducing full transaction detection for Cloudflare WAF
Today, we are expanding our web application firewall (WAF) by adding two new capabilities: full transaction detections and response rules. Full transaction detections evaluate each…