Hackers heat fridges at major French supermarkets, spoiling food
Hackers raised the temperature of refrigerators and freezers at hundreds of French supermarkets to as high as 50 degrees Celsius (122 Fahrenheit) overnight, causing fires…
Year: 2026
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
Executive Summary Unit 42 is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. Both are remote code execution (RCE) vulnerabilities rated as 9.2…
Google, Mozilla revoke eMudhra intermediates after private key compromise
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhra have been compromised, potentially allowing attackers to forge trusted certificates…
Tenable OPEN for AI connects exposure management with threat detection and incident investigations
Exposure management company Tenable Holdings announced expansion of its open technology and partner ecosystem to accelerate integrated security workflows across the entire tech stack. Tenable…
Accenture, Dragos and SANS Institute launch $10 million initiative to strengthen cybersecurity at US utilities
Accenture, Dragos Inc. and the SANS Institute announced a major initiative to help strengthen cyber defenses for under-resourced U.S. water, electric and natural gas utilities.…
Introducing full transaction detection for Cloudflare WAF
Today, we are expanding our web application firewall (WAF) by adding two new capabilities: full transaction detections and response rules. Full transaction detections evaluate each…
Description of PHP vulnerabilities: CVE-2026-109618 and CVE-2026-109619 (PHP2Shell)
Vulnerability overview On October 20, 2026, the PHP security team published a preliminary notice regarding an upcoming emergency release that addresses two critical vulnerabilities (both…
Elastic SIEM tags: Providing useful detection context for prioritization
Of Elastic’s 2100+ prebuilt detection rules, 385 are tagged Profile: Recommended and 296 are tagged Aggressive. The rest (62% of the list) are deliberately left…
Critical PHP vulnerabilities put millions of sites at risk.
Top stories. Critical PHP vulnerabilities put millions of sites at risk. Indian certificate authority exposes private keys. FBI suspects a second ransomware negotiator in ShinyHunters…
OpenAI agents disabled safety monitoring, one lied about it
OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do…
Salt Security wins three InfoSec Innovator awards
Salt Security has won three categories at Cyber Defense Magazine’s 2026 Top InfoSec Innovators awards, recognising its work in agentic AI and API security. The…
Widespread PHP Flaw May Cause Many Site Outages Today – Krebs on Security
Expect to see quite a few websites serving error pages today: Nearly 70 percent of websites need to update their core software to fix a…